Heartbleed affected Storage Systems

[Ruben_Herold]

hi,

has anybody a list of all systems affected by the heartbleed bug:

http://en.wikipedia.org/wiki/Heartbleed

I found out that these systems are affected:

P2000G3 newest Firmware

P9500 newest Firmware

[HeHan]

Any specific storage system you're thinking about?

[Torsten.]

Where did you get the information?

Obviously the P9500 is affected if it is using apache 2.2.24 only (see c04240206 - "HP XP P9500 Disk Array running OpenSSL, Remote Disclosure of Information"), the MSA is "under investigation" so far.

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c04240206-1%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&ac.admitted=1397641622...

[Michael Leu]

HP advisory c04239413 also contains some useful information on what is and isn't affected:

Notice: HP Servers Communication: OpenSSL "HeartBleed" Vulnerability

[Torsten.]

Yes, it is related to servers, but a good information anyway.

...

Products NOT Impacted by "HeartBleed"

Virtual Connect

Integrated Lights Out (iLO) 2, 3, 4

HP Insight Control Server Provisioning

System Management Homepage (SMH) HP-UX

HP OneView

Systems Insight Manager

NonStop SSL

iTP WebServer for NonStop Servers

Onboard Administrator for NonStop Integrity Platforms

HP-UX

OpenVMS

Products Impacted by "HeartBleed"

Product Version Impacted

Security Bulletin

HP Onboard Administrator (OA)

4.11 and 4.20

HPSBMU02994

HP Smart Update Manager (HP SUM)

6.0.0 - 6.3.0

HPSBMU02997

HP System Management Homepage (SMH) Linux and Windows

7.1.2, 7.2, 7.2.1, 7.2.2, 7.3, 7.3.1

HPSBMU02998