CVE:CVE-2009-3555
CNNVD:CNNVD-200911-069
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.2.14及之前版本存在信任管理问题漏洞，该漏洞源于TLS协议和SSL协议实现模块没有适当将会话协商与现存连接关联，中间人攻击者可以通过发送一个未认证的请求，将数据注入到受TLS和SSL协议保护的HTTP会话和其它类型会话中。
solution:Upgrade apache http_server to a higher version than 2.2.14,and avoid the version (,2.2.14]; Upgrade gnu gnutls to a higher version than 2.8.5,and avoid the version (,2.8.5]; Upgrade mozilla nss to a higher version than 3.12.4,and avoid the version (,3.12.4]; Upgrade openssl openssl to a higher version than 0.9.8k,1.0,and avoid the version (,0.9.8k],1.0; Upgrade canonical ubuntu_linux to a higher version than 8.04,8.10,9.04,9.10,10.04,10.10,and avoid the version 8.04,8.10,9.04,9.10,10.04,10.10; Upgrade debian debian_linux to a higher version than 4.0,5.0,6.0,7.0,8.0,and avoid the version 4.0,5.0,6.0,7.0,8.0; Upgrade fedoraproject fedora to a higher version than 11,12,13,14,and avoid the version 11,12,13,14; Upgrade f5 nginx to a higher version than 0.8.22,and avoid the version [0.1.0,0.8.22]