漏洞描述
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
secunia.comhttp://secunia.com/advisories/59669↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678167↗secunia.comhttp://secunia.com/advisories/59528↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677080↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0006.html↗secunia.comhttp://secunia.com/advisories/59055↗marc.infohttp://marc.info/?l=bugtraq&m=140852757108392&w=2↗secunia.comhttp://secunia.com/advisories/58743↗secunia.comhttp://secunia.com/advisories/59365↗secunia.comhttp://secunia.com/advisories/59429↗www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6061&myns=phmc&mync=E↗secunia.comhttp://secunia.com/advisories/58939↗marc.infohttp://marc.info/?l=bugtraq&m=140431828824371&w=2↗secunia.comhttp://secunia.com/advisories/59518↗marc.infohttp://marc.info/?l=bugtraq&m=141658880509699&w=2↗secunia.comhttp://secunia.com/advisories/59189↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676615↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001841↗secunia.comhttp://secunia.com/advisories/59370↗filezilla-project.orghttps://filezilla-project.org/versions.php?type=server↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html↗secunia.comhttp://secunia.com/advisories/59364↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0631.html↗ccsinjection.lepidum.co.jphttp://ccsinjection.lepidum.co.jp↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676478↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676879↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676877↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=KB29195↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg24037783↗marc.infohttp://marc.info/?l=bugtraq&m=142350350616251&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037870↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676356↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2014:105↗secunia.comhttp://secunia.com/advisories/59589↗esupport.trendmicro.comhttp://esupport.trendmicro.com/solution/en-US/1103813.aspx↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677567↗www.imperialviolet.orghttps://www.imperialviolet.org/2014/06/05/earlyccs.html↗secunia.comhttp://secunia.com/advisories/59389↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0680.html↗secunia.comhttp://secunia.com/advisories/58660↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676333↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676833↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037761↗secunia.comhttp://secunia.com/advisories/59655↗secunia.comhttp://secunia.com/advisories/59162↗secunia.comhttp://secunia.com/advisories/59495↗secunia.comhttp://secunia.com/advisories/60819↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677695↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=migr-5095737↗secunia.comhttp://secunia.com/advisories/59451↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037729↗secunia.comhttp://secunia.com/advisories/59192↗secunia.comhttp://secunia.com/advisories/59368↗secunia.comhttp://secunia.com/advisories/59342↗secunia.comhttp://secunia.com/advisories/58128↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676035↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676334↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755↗secunia.comhttp://secunia.com/advisories/60571↗secunia.comhttp://secunia.com/advisories/58492↗secunia.comhttp://secunia.com/advisories/59004↗secunia.comhttp://secunia.com/advisories/59142↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1020172↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg1IV61506↗www.securitytracker.comhttp://www.securitytracker.com/id/1031594↗www.splunk.comhttp://www.splunk.com/view/SP-CAAAM2D↗secunia.comhttp://secunia.com/advisories/58759↗secunia.comhttp://secunia.com/advisories/59894↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676071↗secunia.comhttp://secunia.com/advisories/59514↗secunia.comhttp://secunia.com/advisories/59310↗secunia.comhttp://secunia.com/advisories/59824↗secunia.comhttp://secunia.com/advisories/61815↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676501↗dev.mysql.comhttp://dev.mysql.com/doc/relnotes/workbench/en/wb-news-6-1-7.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037732↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html↗secunia.comhttp://secunia.com/advisories/59450↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21673137↗www.blackberry.comhttp://www.blackberry.com/btsc/KB36051↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/978508↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037727↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html↗bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1103586↗www.ibm.comhttps://www.ibm.com/support/docview.wss?uid=ssg1S1004671↗secunia.comhttp://secunia.com/advisories/59666↗secunia.comhttp://secunia.com/advisories/59916↗marc.infohttp://marc.info/?l=bugtraq&m=140904544427729&w=2↗support.f5.comhttp://support.f5.com/kb/en-us/solutions/public/15000/300/sol15325.html↗www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015264↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677131↗secunia.comhttp://secunia.com/advisories/59191↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21675626↗marc.infohttp://marc.info/?l=bugtraq&m=140448122410568&w=2↗secunia.comhttp://secunia.com/advisories/59454↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676845↗www14.software.ibm.comhttp://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=6060&myns=phmc&mync=E↗secunia.comhttp://secunia.com/advisories/59440↗secunia.comhttp://secunia.com/advisories/59101↗secunia.comhttp://secunia.com/advisories/59449↗support.apple.comhttp://support.apple.com/kb/HT6443↗marc.infohttp://marc.info/?l=bugtraq&m=140852826008699&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=141164638606214&w=2↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095740↗secunia.comhttp://secunia.com/advisories/59300↗secunia.comhttp://secunia.com/advisories/59190↗secunia.comhttp://secunia.com/advisories/59442↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676536↗secunia.comhttp://secunia.com/advisories/58337↗access.redhat.comhttps://access.redhat.com/site/blogs/766093/posts/908133↗marc.infohttp://marc.info/?l=bugtraq&m=142805027510172&w=2↗www.innominate.comhttp://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=KB29217↗marc.infohttp://marc.info/?l=bugtraq&m=141025641601169&w=2↗secunia.comhttp://secunia.com/advisories/59491↗aix.software.ibm.comhttp://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html↗secunia.comhttp://secunia.com/advisories/59264↗secunia.comhttp://secunia.com/advisories/59438↗secunia.comhttp://secunia.com/advisories/58714↗secunia.comhttp://secunia.com/advisories/59659↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676793↗secunia.comhttp://secunia.com/advisories/59163↗secunia.comhttp://secunia.com/advisories/58977↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2014:106↗marc.infohttp://marc.info/?l=bugtraq&m=140672208601650&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1020163↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037730↗secunia.comhttp://secunia.com/advisories/59040↗tools.cisco.comhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl↗secunia.comhttp://secunia.com/advisories/58713↗secunia.comhttp://secunia.com/advisories/59827↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg1IT02314↗secunia.comhttp://secunia.com/advisories/60049↗secunia.comhttp://secunia.com/advisories/59167↗marc.infohttp://marc.info/?l=bugtraq&m=140386311427810&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140266410314613&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140621259019789&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140389355508263&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0630.html↗secunia.comhttp://secunia.com/advisories/58930↗marc.infohttp://marc.info/?l=bugtraq&m=140784085708882&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140482916501310&w=2↗secunia.comhttp://secunia.com/advisories/59784↗secunia.comhttp://secunia.com/advisories/60176↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677390↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676786↗marc.infohttp://marc.info/?l=bugtraq&m=142546741516006&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678289↗secunia.comhttp://secunia.com/advisories/59132↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757↗marc.infohttp://marc.info/?l=bugtraq&m=140499864129699&w=2↗www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisories/941-security-advisory-0005↗secunia.comhttp://secunia.com/advisories/59301↗secunia.comhttp://secunia.com/advisories/59126↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678233↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html↗secunia.comhttp://secunia.com/advisories/59374↗secunia.comhttp://secunia.com/advisories/59362↗secunia.comhttp://secunia.com/advisories/59525↗marc.infohttp://marc.info/?l=bugtraq&m=140491231331543&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677527↗secunia.comhttp://secunia.com/advisories/59215↗www.huawei.comhttp://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm↗www.tenable.comhttp://www.tenable.com/blog/nessus-527-and-pvs-403-are-available-for-download↗secunia.comhttp://secunia.com/advisories/59375↗secunia.comhttp://secunia.com/advisories/58719↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0624.html↗blogs.oracle.comhttps://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues1↗secunia.comhttp://secunia.com/advisories/59347↗secunia.comhttp://secunia.com/advisories/59325↗cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-234763.pdf↗secunia.comhttp://secunia.com/advisories/59383↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0627.html↗secunia.comhttp://secunia.com/advisories/58579↗secunia.comhttp://secunia.com/advisories/59380↗secunia.comhttp://secunia.com/advisories/58385↗support.citrix.comhttp://support.citrix.com/article/CTX140876↗secunia.comhttp://secunia.com/advisories/60522↗secunia.comhttp://secunia.com/advisories/59460↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676062↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676529↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676655↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg24037731↗kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10075↗linux.oracle.comhttp://linux.oracle.com/errata/ELSA-2014-1053.html↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html↗security.gentoo.orghttp://security.gentoo.org/glsa/glsa-201407-05.xml↗secunia.comhttp://secunia.com/advisories/58667↗secunia.comhttp://secunia.com/advisories/58742↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0632.html↗puppetlabs.comhttp://puppetlabs.com/security/cve/cve-2014-0224↗secunia.comhttp://secunia.com/advisories/59188↗secunia.comhttp://secunia.com/advisories/59223↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21683332↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:062↗www.intersectalliance.comhttps://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_Snare_for_Windows.pdf↗marc.infohttp://marc.info/?l=bugtraq&m=140983229106599&w=2↗secunia.comhttp://secunia.com/advisories/59338↗secunia.comhttp://secunia.com/advisories/59435↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21675821↗www.openssl.orghttp://www.openssl.org/news/secadv_20140605.txt↗secunia.comhttp://secunia.com/advisories/59447↗marc.infohttp://marc.info/?l=bugtraq&m=140389274407904&w=2↗secunia.comhttp://secunia.com/advisories/59287↗secunia.comhttp://secunia.com/advisories/59661↗secunia.comhttp://secunia.com/advisories/60577↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754↗secunia.comhttp://secunia.com/advisories/59231↗www.novell.comhttps://www.novell.com/support/kb/doc.php?id=7015271↗secunia.comhttp://secunia.com/advisories/58945↗www.ibm.comhttps://www.ibm.com/support/docview.wss?uid=ssg1S1004670↗secunia.comhttp://secunia.com/advisories/59043↗marc.infohttp://marc.info/?l=bugtraq&m=140794476212181&w=2↗secunia.comhttp://secunia.com/advisories/58433↗secunia.comhttp://secunia.com/advisories/59282↗secunia.comhttp://secunia.com/advisories/59012↗secunia.comhttp://secunia.com/advisories/58615↗secunia.comhttp://secunia.com/advisories/59490↗secunia.comhttp://secunia.com/advisories/59530↗marc.infohttp://marc.info/?l=bugtraq&m=141383465822787&w=2↗secunia.comhttp://secunia.com/advisories/59502↗www.fortiguard.comhttp://www.fortiguard.com/advisory/FG-IR-14-018/↗secunia.comhttp://secunia.com/advisories/60567↗seclists.orghttp://seclists.org/fulldisclosure/2014/Dec/23↗secunia.comhttp://secunia.com/advisories/59446↗secunia.comhttp://secunia.com/advisories/58745↗git.openssl.orghttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=bc8923b1ec9c467755cd86f7848c50ee8812e441↗www.intersectalliance.comhttps://www.intersectalliance.com/wp-content/uploads/release_notes/ReleaseNotes_for_SNARE_for_MSSQL.pdf↗marc.infohttp://marc.info/?l=bugtraq&m=140752315422991&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140870499402361&w=2↗seclists.orghttp://seclists.org/fulldisclosure/2014/Jun/38↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html↗secunia.comhttp://secunia.com/advisories/59602↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001843↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677828↗blogs.oracle.comhttps://blogs.oracle.com/sunsecurity/entry/cve_2014_0224_cryptographic_issues↗secunia.comhttp://secunia.com/advisories/59444↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676419↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676889↗secunia.comhttp://secunia.com/advisories/59529↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677836↗www.novell.comhttp://www.novell.com/support/kb/doc.php?id=7015300↗secunia.comhttp://secunia.com/advisories/59135↗www.securitytracker.comhttp://www.securitytracker.com/id/1031032↗secunia.comhttp://secunia.com/advisories/59441↗secunia.comhttp://secunia.com/advisories/59063↗secunia.comhttp://secunia.com/advisories/59120↗secunia.comhttp://secunia.com/advisories/59214↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=isg3T1020948↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html↗secunia.comhttp://secunia.com/advisories/59721↗marc.infohttp://marc.info/?l=bugtraq&m=141147110427269&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140317760000786&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140369637402535&w=2↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0626.html↗secunia.comhttp://secunia.com/advisories/59459↗secunia.comhttp://secunia.com/advisories/58639↗secunia.comhttp://secunia.com/advisories/59448↗secunia.comhttp://secunia.com/advisories/59885↗www.kerio.comhttp://www.kerio.com/support/kerio-control/release-history↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2014-0633.html↗secunia.comhttp://secunia.com/advisories/59093↗secunia.comhttp://secunia.com/advisories/59306↗secunia.comhttp://secunia.com/advisories/59483↗secunia.comhttp://secunia.com/advisories/59506↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html↗secunia.comhttp://secunia.com/advisories/59202↗secunia.comhttp://secunia.com/advisories/59878↗kb.bluecoat.comhttps://kb.bluecoat.com/index?page=content&id=SA80↗marc.infohttp://marc.info/?l=bugtraq&m=140604261522465&w=2↗secunia.comhttp://secunia.com/advisories/59990↗secunia.comhttp://secunia.com/advisories/59354↗secunia.comhttp://secunia.com/advisories/61254↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629↗secunia.comhttp://secunia.com/advisories/59211↗secunia.comhttp://secunia.com/advisories/59284↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676496↗secunia.comhttp://secunia.com/advisories/60066↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=ssg1S1004690↗discussions.nessus.orghttps://discussions.nessus.org/thread/7517↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html↗secunia.comhttp://secunia.com/advisories/59186↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=ssg1S1004678↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/534161/100/0/threaded↗secunia.comhttp://secunia.com/advisories/59413↗marc.infohttp://marc.info/?l=bugtraq&m=140544599631400&w=2↗www.websense.comhttp://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0↗secunia.comhttp://secunia.com/advisories/59445↗secunia.comhttp://secunia.com/advisories/59437↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0012.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676644↗secunia.comhttp://secunia.com/advisories/59175↗secunia.comhttp://secunia.com/advisories/59677↗secunia.comhttp://secunia.com/advisories/58716↗www.f-secure.comhttp://www.f-secure.com/en/web/labs_global/fsc-2014-6↗marc.infohttp://marc.info/?l=bugtraq&m=141383410222440&w=2↗secunia.comhttp://secunia.com/advisories/59305↗