OpenSSL bufffer overflow

[Mike Tancsa]

At 05:43 PM 9/28/2007, Stefan Esser wrote:
>I did not see any commits to the OpenSSL code, recently; is anybody
>going to commit the fix?
>
>See http://www.securityfocus.com/archive/1/480855/30/0 for details ...

How serious is this particular issue ? Is it easily exploitable, or 
difficult to do ?  Are some apps more at risk of exploitation than 
others ? e.g. ssh,apache ?

         ---Mike


>Regards, STefan
>_______________________________________________
>freebsd-security at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-security
>To unsubscribe, send any mail to "freebsd-security-unsubscribe at freebsd.org"