Based on its response to a TLS request with a specially crafted server name extension, it seems that the remote service is using the OpenSSL library to encrypt traffic.

Note that this plugin can only detect OpenSSL implementations that have enabled support for TLS extensions (RFC 4366).

OpenSSL was detected on the remote Linux host.

The plugin timeout can be set to a custom value other than the plugin's default of 15 minutes via the 'timeout.168007' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

Note: This plugin leverages the '-maxdepth' find command option, which is a feature implemented by the GNU find binary. If the target does not support this option, such as HP-UX and AIX devices, users will need to enable 'thorough tests' in their scan policy to run the find command without using a '-maxdepth' argument.

Nessus was able to extract the OpenSSL version from the web server's banner. Note that security patches in many cases are backported and the displayed version number does not show the patch level. Using it to identify vulnerable software is likely to lead to false detections.

One or more instances of OpenSSL, a cryptographic utility and library is installed on the remote Windows host.

Note: Thorough tests is required for this plugin to run.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6663-2 advisory.

    USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for     Ubuntu 16.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6663-3 advisory.

    USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for     Ubuntu 24.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is a server running OpenSSL.

Based on the system log, this system is running OpenSSL.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6663-1 advisory.

    As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when     detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6046-1 advisory.

    It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption. An attacker could     possibly use this issue to expose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.2

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.1

The remote host has is an OpenVPN server.  The server is running OpenSSL version 1.0

ID	Name	Product	Family	Published	Updated	Severity
50845	OpenSSL Detection	Nessus	Service detection	11/30/2010	6/12/2020	info
168007	OpenSSL Installed (Linux)	Nessus	Misc.	11/21/2022	11/12/2024	info
57323	OpenSSL Version Detection	Nessus	Web Servers	12/16/2011	11/14/2024	info
168149	OpenSSL Detection (Windows)	Nessus	Misc.	11/23/2022	11/12/2024	info
192022	Ubuntu 16.04 LTS : OpenSSL update (USN-6663-2)	Nessus	Ubuntu Local Security Checks	3/13/2024	10/29/2024	info
197835	Ubuntu 24.04 LTS : OpenSSL update (USN-6663-3)	Nessus	Ubuntu Local Security Checks	5/23/2024	10/29/2024	info
5563	OpenSSL Version Detection	Nessus Network Monitor	Web Servers	6/7/2010	11/23/2016	info
801050	OpenSSL Detected	Log Correlation Engine	Web Servers			info
191054	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : OpenSSL update (USN-6663-1)	Nessus	Ubuntu Local Security Checks	2/27/2024	8/27/2024	info
174906	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : OpenSSL-ibmca vulnerabilities (USN-6046-1)	Nessus	Ubuntu Local Security Checks	4/27/2023	8/28/2024	info
3547	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	4/29/2016	info
3549	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	1/31/2017	info
3545	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	4/29/2016	info
3546	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	4/29/2016	info
3550	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	1/31/2017	info
3548	OpenVPN server OpenSSL version detection	Nessus Network Monitor	Generic	6/3/2014	1/31/2017	info

Detections

Analytics

Plugins Search

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info