CVE:CVE-2009-2631
CNNVD:CNNVD-200912-055
SSL VPN是采用SSL协议来实现远程接入的一种新型VPN技术。它包括：服务器认证，客户认证、SSL链路上的数据完整性和SSL链路上的数据保密性。
SSL VPN 存在安全漏洞，该漏洞允许远程访问攻击者进行跨站点脚本攻击、读取源自其他域的 cookie、访问 Web VPN 会话以获取内部资源的访问权限、执行密钥记录以及进行其他攻击。
solution:Upgrade aladdin safenet_securewire_access_gateway to a higher version than *; Upgrade cisco adaptive_security_appliance to a higher version than *; Upgrade sonicwall e-class_ssl_vpn to a higher version than *; Upgrade sonicwall ssl_vpn to a higher version than *; Upgrade stonesoft stonegate to a higher version than *