We have noticed that at least 3 builds of HP Data Protector 6.2 (32-bit) are using OpenSSL libraries created after December, 2011, but contain no file or product version info:
- 06.20.1004
\Program Files\OmniBack\bin\ssleay32.dll
2/1/2013 7:09:06 PM 932,664
\Program Files\OmniBack\bin\libeay32.dll
2/1/2013 7:08:20 PM 1,296,184
- 06.20.0989
\Program Files\OmniBack\bin\ssleay32.dll
10/21/2012 2:54:00 AM 932,256
\Program Files\OmniBack\bin\libeay32.dll
10/21/2012 2:53:44 AM 1,295,776
- 06.20.0951
\Program Files\OmniBack\bin\ssleay32.dll
12/10/2011 6:01:26 PM 932,224
\Program Files\OmniBack\bin\libeay32.dll
12/10/2011 6:00:34 PM 1,295,744
Are any of these libraries vulnerable to the OpenSSL Heartbleed issue? If so, we will remedy this by upgrading them to the latest HP Data Protector agent version.
Thank you.