Cisco CSS OpenSSL

[mj11]

Hi All

I woundering if someone would be able to help with the following, is it possible to see which version of the OpenSSL is in each version of the CSS code:

Either by a doc or show command:

I am trying to look into the issue CVE-2011-4109, is there way to check the certificate to see if the flag is set?

Regards MJ

[Daniel Arrondo Ostiz]

Hi MJ,

CSS is running a heavily modified version of OpenSSL, so, knowing the exact version on which it's based would not bring any useful information.

I haven't been able to find any mention of this vulnerability in regards to CSS in our records (either confirming or denying it), so I would recommend you to open a TAC service request to have this investigated further.

Regards

Daniel

[mj11]

Hi Daniel

Thanks for the response, I will open a case with Cisco for this.

Thanks MJ