Upgrade to OpenSSL 0.9.8w or later.
Posted by: res5it (80.77.147.---)
Date: July 13, 2012 01:09PM

Hi all... I don't know is this is right topic for you guys, but I really need your help. I've uprgraded wamp to latest version, even upgraded to php 5.4.4 , but now I get the following vuln: Upgrade to OpenSSL 0.9.8w or later.

Can someone please help, is this related to openssll and apache and now can I upgrade it ?

Thank you in advance, it's kinda urgent smiling smiley

Regards

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: stevenmartin99 (Moderator)
Date: July 13, 2012 01:27PM

just go to the opensll site.. get version 1.0 +


goto

C:\wamp\bin\php\php5.3.3\extras\openssl


and replace the files

Steven Martin
stevenmartin99@gmail.com
stevenmartin99@hotmail.com
PampServer.com - [pampserver.com]

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: res5it (80.77.147.---)
Date: July 13, 2012 01:47PM

Thank you for your quick answer, I\ve downloaded openssl for windows, installed, but there is only openssl.exe , not openssl (speed dial). In C:\wamp\bin\php\php5.3.3\extras\openssl there is openssl speeddial, not exe, what I need to do? smiling smiley

Regards

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: stevenmartin99 (Moderator)
Date: July 13, 2012 01:53PM

it shoud be .exe

maybe this is the problem?

Steven Martin
stevenmartin99@gmail.com
stevenmartin99@hotmail.com
PampServer.com - [pampserver.com]

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: stevenmartin99 (Moderator)
Date: July 13, 2012 01:53PM

it shoud be .exe

maybe this is the problem?

Steven Martin
stevenmartin99@gmail.com
stevenmartin99@hotmail.com
PampServer.com - [pampserver.com]

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: res5it (80.77.147.---)
Date: July 13, 2012 02:38PM

Oh.. sad smiley I\m really lost in the process that should be so simple sad smiley

Ok, i downloaded openssl for windows, installed in to C:\OpenSSL-Win32\bin and copyed openssl.exe in to C:\wamp\bin\php\php5.3.3\extras\openssl but still got the message from nessus to upgrade openssl ? What am I doing wrong ?

Thank you so much for helping me

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: stevenmartin99 (Moderator)
Date: July 13, 2012 04:21PM

maybe your not using the openssl exe?

maybe your using the php extension

get a new extension and place it into

C:\wamp\bin\php\php5.x.x\ext

replace the one thats there?

Steven Martin
stevenmartin99@gmail.com
stevenmartin99@hotmail.com
PampServer.com - [pampserver.com]

Options: ReplyQuote
Re: Upgrade to OpenSSL 0.9.8w or later.
Posted by: res5it (---.btc-net.bg)
Date: July 16, 2012 11:08AM

No, I don't use extensions, checked my php.ini, is tabbed. Maybe I need to copy over openssl speed dial and where can I find ti?

Thank you

Options: ReplyQuote


Sorry, only registered users may post in this forum.