6.0.9, openssl fix, urgency?

[NathanL]

I'm trying to get a feel for the urgency of the ZCS 6.0.9 upgrade. I understand that the openssl issue is fixed in this upgrade, however i'm trying to schedule our upgrade, and i need to get an idea of how urgent it really is.

Is there currently a usable exploit for this bug?

Thanks.

[phoenix]

Originally Posted by NathanL

I'm trying to get a feel for the urgency of the ZCS 6.0.9 upgrade. I understand that the openssl issue is fixed in this upgrade, however i'm trying to schedule our upgrade, and i need to get an idea of how urgent it really is.

Is there currently a usable exploit for this bug?

My advice would be to update as soon as possible, that's why the fix was issued. Details here:

http://openssl.org/news/secadv_20101116.txt
CVE-2010-3864 - Advisories - Community
+"cve-2010-3864" +ssl - Yahoo! Search Results