CVE:CVE-2012-3446
CNNVD:CNNVD-201207-663
Libcloud是美国阿帕奇（Apache）软件基金会的一个Python库，它为各个云供应商的专有API提供了厂商中立的接口。
Apache Libcloud 0.11.1之前版本中存在漏洞，该漏洞源于在主题的Common Name (CN)或subjectAltName字段的X.509证书中服务器主机名是否匹配域名验证期间，使用错误的正则表达式。中间人攻击者利用该漏洞通过特制的证书欺骗SSL服务器。
solution:Upgrade apache libcloud to a higher version than 0.11.0,0.2.0,0.3.0,0.3.1,0.4.0,0.4.2,0.5.0,0.5.2,0.6.0:beta1,0.6.1,0.6.2,0.7.0,0.7.1,0.8.0,0.9.1,0.10.1,and avoid the version (,0.11.0],0.2.0,0.3.0,0.3.1,0.4.0,0.4.2,0.5.0,0.5.2,0.6.0:beta1,0.6.1,0.6.2,0.7.0,0.7.1,0.8.0,0.9.1,0.10.1