CVE:CVE-2020-7043
CNNVD:CNNVD-202002-1271
openfortivpn是一款PPP（点对点协议）+SSL（传输层安全协议） VPN隧道服务的客户端程序。
openfortivpn 1.11.0版本（使用OpenSSL 1.0.2之前版本）中存在安全漏洞，该漏洞源于在比较主机名时没有考虑到‘’字符，导致tunnel.c文件无法正确处理证书的校验。攻击者可利用该漏洞绕过安全限制，获取系统的访问权限。
solution:Upgrade openfortivpn_project openfortivpn to a higher version than 1.12.0,and avoid the version (,1.12.0); Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1