Heartbleed

[peterh_oz]

Could someone from Exetel please advise whether any Exetel sites (including members, forums, etc) were vulnerable to the Heartbleed SSL bug? And if so, whether the patches have been applied. Trying to ascertain whether password changes are necessary.

Thanx

[Dazzled]

For the general case, this tool (code) may be of interest- https://github.com/FiloSottile/Heartbleed. The author has a website test, as noted.

Also nmap script here- https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. Article here- http://rollingwebsphere.blogspot.com.au ... -nmap.html There are several online discussions of the nmap tool.