Forum Thread: OpenSSL 1.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
Mark377 OpenSSL 1.x
Member 6th Aug, 2016 11:32
Ranking: 0
Posts: 5
User Since: 6th Aug, 2016
System Score: N/A
Location: UK
PSI 3.0 has flagged OpenSSL 1.x on both my main PC and laptop. Clicking update takes me to the OpenSSL website, but as OpenSSL is not used much on Windows, there is not an obvious way to update. As OpenSSL is most likely part of an installed program, installing OpenSSL may not update it anyway.
Online searches have not helped and without knowing which program is using OpenSSL, I'm stuck for a solution.
Any suggestions to resolve this appreciated, thanks.

This is the location of the OpenSSL files:
Laptop Win10 Anniversary Update - Version 1607 Build 14393.10
OpenSSL - C:\Windows\SysWOW64\ssleay32.dll - 1.0.2g
OpenSSL 64bit - C:\Windows\System32\libeay32.dll - 1.0.1m

Main PC - Win 10 version 1511 Build 10586.494
OpenSSL - C:\Windows\SysWOW64\ssleay32.dll - 1.0.2g

Maurice Joyce RE: OpenSSL 1.x
Handling Contributor 6th Aug, 2016 11:57
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Are you using Adobe Photoshop CS5?

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Mark377 RE: OpenSSL 1.x
Member 6th Aug, 2016 12:37
Score: 0
Posts: 5
User Since: 6th Aug 2016
System Score: N/A
Location: UK
Thanks for your prompt reply.
No I'm not using CS5. I don't have any other programs showing as requiring an update.
Was this reply relevant?
+0
-0
Maurice Joyce RE: OpenSSL 1.x
Handling Contributor 6th Aug, 2016 19:06
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Thank you. Have you considered renaming the offending files on one of the PC's by adding an extension of something like .OLD?

That will clear the security issue after a full PSI scan and should break the application using the files so that you can identify it.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0

Mark377

RE: OpenSSL 1.x
[+]
This reply has been deleted
Mark377 RE: OpenSSL 1.x
Member 6th Aug, 2016 22:47
Score: 0
Posts: 5
User Since: 6th Aug 2016
System Score: N/A
Location: UK
On the laptop I have tried changing the ssleay32.dll to oldssleay32.dll as that is the common file on both computers. It no longer shows on the Secunia scan but so far I've not managed to break a program.
The laptop was new in December and has not had many additional programs installed. I have looked to see which non microsoft programs are on both computers and there are about four, so unless I have two separate programs causing the same problem, then it must be one of those.
Thanks for your help, I realise that there is not an easy way to isolate the issue, so will continue trying to find the culprit and will report back when I do.
Was this reply relevant?
+0
-0
Maurice Joyce RE: OpenSSL 1.x
Handling Contributor 13th Aug, 2016 14:24
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Mark,
This thread auto locked after 7 days of no activity. I have reopened it for a further 7 days in case you wish to report back on any findings.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+0
-0
Mark377 RE: OpenSSL 1.x
Member 19th Aug, 2016 10:08
Score: 0
Posts: 5
User Since: 6th Aug 2016
System Score: N/A
Location: UK
I'm unable to find the program that contains OpenSSL. I have removed a number of programs without success and in the end have renamed the two problem .dlls. Secunia no longer sees the files.
Was this reply relevant?
+0
-0

This thread has been marked as locked.