You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@solr.apache.org by Turritopsis Dohrnii Teo En Ming <ce...@gmail.com> on 2021/12/16 14:39:10 UTC

How do I determine which hardware device and software has log4j zero-day security vulnerability?

Subject: How do I determine which hardware device and software has
log4j zero-day security vulnerability?

Good day from Singapore,

I am working for a Systems Integrator (SI) in Singapore. We have
several clients writing in, requesting us to identify log4j zero-day
security vulnerability in their corporate infrastructure.

It seems to be pretty difficult to determine which hardware device and
which software has the vulnerability. There seems to be no lists of
hardware devices and software affected by the flaw any where on the
internet.

Could you refer me to definitive documentation/guides on how to
identify log4j security flaw in hardware devices and software?

Thank you very much for your kind assistance.

Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 16 Dec 2021,
is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant
with a Systems Integrator (SI)/computer firm in Singapore. He is an IT
enthusiast.





-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************

Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's
Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts
at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan
(5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

Re: How do I determine which hardware device and software has log4j zero-day security vulnerability?

Posted by Turritopsis Dohrnii Teo En Ming <ce...@gmail.com>.
Hi,

Thanks for the CISA github link.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
19 Dec 2021 Sunday


On Fri, 17 Dec 2021 at 17:13, Aman Tandon <am...@gmail.com> wrote:
>
> Hi,
>
> Please see the list of affected softwares in below github link, this might
> not be complete list. But there are many commonly used software products
> used by the company. Hope that helps you.
>
> https://github.com/cisagov/log4j-affected-db
>
> Regards,
> Aman
>
> On Thu, 16 Dec 2021, 20:09 Turritopsis Dohrnii Teo En Ming, <
> ceo.teo.en.ming@gmail.com> wrote:
>
> > Subject: How do I determine which hardware device and software has
> > log4j zero-day security vulnerability?
> >
> > Good day from Singapore,
> >
> > I am working for a Systems Integrator (SI) in Singapore. We have
> > several clients writing in, requesting us to identify log4j zero-day
> > security vulnerability in their corporate infrastructure.
> >
> > It seems to be pretty difficult to determine which hardware device and
> > which software has the vulnerability. There seems to be no lists of
> > hardware devices and software affected by the flaw any where on the
> > internet.
> >
> > Could you refer me to definitive documentation/guides on how to
> > identify log4j security flaw in hardware devices and software?
> >
> > Thank you very much for your kind assistance.
> >
> > Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 16 Dec 2021,
> > is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant
> > with a Systems Integrator (SI)/computer firm in Singapore. He is an IT
> > enthusiast.
> >
> >
> >
> >
> >
> > -----BEGIN EMAIL SIGNATURE-----
> >
> > The Gospel for all Targeted Individuals (TIs):
> >
> > [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> > U.S. Embassy Workers
> >
> > Link:
> > https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html
> >
> >
> > ********************************************************************************************
> >
> > Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's
> > Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts
> > at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan
> > (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020):
> >
> > [1] https://tdtemcerts.wordpress.com/
> >
> > [2] https://tdtemcerts.blogspot.sg/
> >
> > [3] https://www.scribd.com/user/270125049/Teo-En-Ming
> >
> > -----END EMAIL SIGNATURE-----
> >

Re: How do I determine which hardware device and software has log4j zero-day security vulnerability?

Posted by Aman Tandon <am...@gmail.com>.
Hi,

Please see the list of affected softwares in below github link, this might
not be complete list. But there are many commonly used software products
used by the company. Hope that helps you.

https://github.com/cisagov/log4j-affected-db

Regards,
Aman

On Thu, 16 Dec 2021, 20:09 Turritopsis Dohrnii Teo En Ming, <
ceo.teo.en.ming@gmail.com> wrote:

> Subject: How do I determine which hardware device and software has
> log4j zero-day security vulnerability?
>
> Good day from Singapore,
>
> I am working for a Systems Integrator (SI) in Singapore. We have
> several clients writing in, requesting us to identify log4j zero-day
> security vulnerability in their corporate infrastructure.
>
> It seems to be pretty difficult to determine which hardware device and
> which software has the vulnerability. There seems to be no lists of
> hardware devices and software affected by the flaw any where on the
> internet.
>
> Could you refer me to definitive documentation/guides on how to
> identify log4j security flaw in hardware devices and software?
>
> Thank you very much for your kind assistance.
>
> Mr. Turritopsis Dohrnii Teo En Ming, 43 years old as of 16 Dec 2021,
> is a TARGETED INDIVIDUAL living in Singapore. He is an IT Consultant
> with a Systems Integrator (SI)/computer firm in Singapore. He is an IT
> enthusiast.
>
>
>
>
>
> -----BEGIN EMAIL SIGNATURE-----
>
> The Gospel for all Targeted Individuals (TIs):
>
> [The New York Times] Microwave Weapons Are Prime Suspect in Ills of
> U.S. Embassy Workers
>
> Link:
> https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html
>
>
> ********************************************************************************************
>
> Singaporean Targeted Individual Mr. Turritopsis Dohrnii Teo En Ming's
> Academic Qualifications as at 14 Feb 2019 and refugee seeking attempts
> at the United Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan
> (5 Aug 2019) and Australia (25 Dec 2019 to 9 Jan 2020):
>
> [1] https://tdtemcerts.wordpress.com/
>
> [2] https://tdtemcerts.blogspot.sg/
>
> [3] https://www.scribd.com/user/270125049/Teo-En-Ming
>
> -----END EMAIL SIGNATURE-----
>