Vulnerabilities in OpenSSL 0.9.8q being used by Smart Protection Server (SPS) 3.0

- Updated:
- 25 Mar 2020
- Product/Version:
- Smart Protection Server 3.0
- Platform:
- CentOS 5.6 64-bit

Summary

Smart Protection Server 3.0 uses OpenSSL 0.9.8q, which is affected by the following vulnerabilities:

CVE-2014-0224
CVE-2014-0221
CVE-2014-0195
CVE-2014-0198
CVE-2010-5298
CVE-2014-3470
CVE-2014-0076

Details

Hot Fix Build 1176 upgrades the OpenSSL in SPS 3.0 to resolve the vulnerabilities. For more information, check the attached Readme file.

Contact Trend Micro Technical Support to get a copy of this hot fix.

Hot fixes are downloadable code fixes for bugs or specific issues encountered by specific customers. Hot fixes are meant to be interim solutions that will eventually be consolidated into a patch or service pack for your product.
Trend Micro recommends applying patches or service packs instead of individual hot fixes whenever possible.