ePO - OpenSSL versions (CVE-2014-0160)

[Former Member]

I am running the same version and installed the original. verified that the files were now 1.0.1.7 and my nexpose scanner is still showing the system vulnerable. I have not attempted the new hotfix

[humph]

Appreciate the Feedback! +1

Keep me posted..

Thanks

Message was edited by: humph on 4/16/14 2:52:30 PM CDT

[JoeBidgood]

If the file is the correct version, then you should be OK.

It may sound like a foolish question but have you confirmed the port that is showing as vulnerable is the same port that ePO is listening on? It's possible you have other unpatched software on the machine listening on a different port...

HTH -

Joe

[JoeBidgood]

Yes, you can ignore it - it only affects ePO 5 migrations. As long as the dll is the correct version you should be fine.

HTH -

Joe

[humph]

OK Thanks for the clarification @JoeBidgood

[Former Member]

Hi, I'm running version ePO 4.6.6 on W2k3 SP2 and when I try to run the reposted patch file for 4.6x I get the Windows Installer options screen.  I upgraded Windows Installer from the Microsoft site but still the same issue.  Did anyone else get this?