CVE:CVE-2015-4000
CNNVD:CNNVD-201505-428
TLS是IETF标准组织的一个传输层安全性协议，目的是为互联网通信提供安全及数据完整性保障。
TLS协议1.2及之前版本中存在加密问题漏洞，该漏洞源于当服务器启用DHE_EXPORT密码套件时，程序没有正确传递DHE_EXPORT选项。攻击者可通过重写ClientHello（使用DHE_EXPORT取代DHE），然后重写ServerHello（使用DHE取代DHE_EXPORT），利用该漏洞实施中间人攻击和cipher-downgrade攻击。
solution:Upgrade openssl openssl to a higher version than 1.0.1m,1.0.2a,1.0.1m,and avoid the version [1.0.1,1.0.1m],[1.0.2,1.0.2a],(,1.0.1m]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,15.04,and avoid the version 12.04,14.04,14.10,15.04; Upgrade hp hp-ux to a higher version than b.11.31,and avoid the version b.11.31; Upgrade ibm content_manager to a higher version than 8.5,and avoid the version 8.5; Upgrade oracle jrockit to a higher version than r28.3.6,and avoid the version r28.3.6; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade oracle jdk to a higher version than 1.6.0:update95,1.7.0:update75,1.7.0:update80,1.8.0:update_33,1.8.0:update45,and avoid the version 1.6.0:update95,1.7.0:update75,1.7.0:update80,1.8.0:update_33,1.8.0:update45; Upgrade oracle jre to a higher version than 1.6.0:update_95,1.7.0:update_75,1.7.0:update_80,1.8.0:update_33,1.8.0:update_45,and avoid the version 1.6.0:update_95,1.7.0:update_75,1.7.0:update_80,1.8.0:update_33,1.8.0:update_45; Upgrade suse linux_enterprise_desktop to a higher version than 12,and avoid the version 12; Upgrade suse linux_enterprise_server to a higher version than 11.0:sp4,and avoid the version 11.0:sp4; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12,and avoid the version 12; Upgrade suse suse_linux_enterprise_server to a higher version than 12,and avoid the version 12; Upgrade apple iphone_os to a higher version than 8.3,and avoid the version (,8.3]; Upgrade apple mac_os_x to a higher version than 10.10.3,and avoid the version (,10.10.3]; Upgrade mozilla network_security_services to a higher version than 3.19,and avoid the version 3.19; Upgrade oracle sparc-opl_service_processor to a higher version than 1121,and avoid the version (,1121]; Upgrade apple safari to a higher version than -; Upgrade google chrome to a higher version than -; Upgrade microsoft internet_explorer to a higher version than -; Upgrade mozilla firefox to a higher version than -,39.0,and avoid the version 39.0; Upgrade opera opera_browser to a higher version than -; Upgrade mozilla firefox_esr to a higher version than 31.8,38.1.0,and avoid the version 31.8,38.1.0; Upgrade mozilla seamonkey to a higher version than 2.35,and avoid the version 2.35; Upgrade mozilla thunderbird to a higher version than 31.8,38.1,and avoid the version 31.8,38.1; Upgrade mozilla firefox_os to a higher version than 2.2,and avoid the version 2.2