CVE:CVE-2011-1923
CNNVD:CNNVD-201206-107
PolarSSL中存在安全绕过漏洞。攻击者可利用该漏洞执行中间人攻击或冒充受信任的服务器，这将有助于进一步的攻击。注意：攻击者利用该漏洞需要以下的加密套件禁用完全认证：1) SSL_EDH_RSA_DES_168_SHA 2) SSL_EDH_RSA_AES_128_SHA 3) SSL_EDH_RSA_AES_256_SHA 4) SSL_EDH_RSA_CAMELLIA_128_SHA 5) SSL_EDH_RSA_CAMELLIA_256_SHA。PolarSSL 0.14.2之前版本和0.99-pre1版本中存在该漏洞。
solution:Upgrade polarssl polarssl to a higher version than 0.14.0,0.10.0,0.10.1,0.11.0,0.11.1,0.12.0,0.12.1,0.13.1,and avoid the version (,0.14.0],0.10.0,0.10.1,0.11.0,0.11.1,0.12.0,0.12.1,0.13.1