CVE:CVE-2008-7129
CNNVD:CNNVD-200908-481
XySSL 0.9之前版本允许远程攻击者借助一个X.509证书，引起拒绝服务攻击(死循环)。该X.509证书在校验过程中不会通过RSA署名检查。
solution:Upgrade xyssl xyssl to a higher version than 0.8,0.1,0.2,0.3,0.4,0.5,0.6,0.7,and avoid the version (,0.8],0.1,0.2,0.3,0.4,0.5,0.6,0.7