CVE:CVE-2010-4180
CNNVD:CNNVD-201012-062
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 0.9.8q之前版本、1.0.x版本至1.0.0c之前版本存在加密问题漏洞，该漏洞源于不能正确阻止修改会话缓存中的密码套件。
solution:Upgrade openssl openssl to a higher version than 0.9.8q,1.0.0c,and avoid the version (,0.9.8q),[1.0.0,1.0.0c); Upgrade fedoraproject fedora to a higher version than 13,14,and avoid the version 13,14; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,10.04,10.10,and avoid the version 6.06,8.04,9.04,10.04,10.10; Upgrade opensuse opensuse to a higher version than 11.1,11.2,11.3,11.4,and avoid the version 11.1,11.2,11.3,11.4; Upgrade suse linux_enterprise to a higher version than 11.0:sp1,and avoid the version 11.0:sp1; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp3,10:sp4,11:sp1,and avoid the version 10:sp3,10:sp4,11:sp1; Upgrade suse linux_enterprise_server to a higher version than 9,10:sp3,10:sp4,and avoid the version 9,10:sp3,10:sp4; Upgrade f5 nginx to a higher version than 0.9.2,and avoid the version (,0.9.2)