CVE:CVE-2015-8400
CNNVD:CNNVD-201601-187
Shell In A Box（又名shellinabox）是软件开发者Markus Gutschke开发的一款用于访问远程Linux服务器的SSH终端产品。
Shell In A Box 2.19之前版本的HTTPS fallback实现过程中存在安全漏洞。远程攻击者可借助‘/plain’URL利用该漏洞实施DNS重新绑定攻击。
solution:Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade shellinabox_project shellinabox to a higher version than 2.18,and avoid the version (,2.18]