CVE:CVE-2008-7128
CNNVD:CNNVD-200908-480
XySSL 0.9之前版本中的ssl_parse_client_key_exchange函数没有使用暗记文对抗特定的Bleichenbacher攻击，这使得远程攻击者可以借助未明向量，发现keys。
solution:Upgrade xyssl xyssl to a higher version than 0.8,0.1,0.2,0.3,0.4,0.5,0.6,0.7,and avoid the version (,0.8],0.1,0.2,0.3,0.4,0.5,0.6,0.7