Posts Tagged ‘Heartbleed bug’

Suddenly the entire web world is full of the openssl vulnerability news “The heartbleed Bug”. This bug has introduced a severe vulnerability to all the https users who use openssl for the secure network transmission. The bug exists because of an overflowing buffer using which anyone can request a lot of secure information from the server including the private key using which someone can even impersonate one for the man in the middle attack. This bug was introduced in the openssl version 1.0.1. Openssl has introduced a patched version 1.0.1g. What this means is that almost all of the internet, from big giants to smaller vendors, needs to update their certificates before some bad guy comes and steals the important information from them.
For the interested programmers and also the newbies who reads in their ABC of programming that malloc and free are dangerous but never understood it how, one can go through the code fix changes and can look for themselves how its necessary to understand the semantics of a programming language before doing something serious.