CVE:CVE-2005-1797
CNNVD:CNNVD-200505-1213
Advanced Encryption Standard (AES)，又称Rijndael，的设计允许远程攻击者通过对S-box查询的定时攻击来恢复AES密钥，这在AES实施中的常数时间内难以执行。
solution:Upgrade openssl openssl to a higher version than 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.5a,0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7a,0.9.7b,0.9.7c,0.9.7d,and avoid the version 0.9.1c,0.9.2b,0.9.3,0.9.4,0.9.5,0.9.5a,0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7a,0.9.7b,0.9.7c,0.9.7d