CVE:CVE-2007-1526
CNNVD:CNNVD-200703-446
Sun Java System Web Server 20070314之前的6.1版本允许拥有调用客户端证书权利的远程认证用户借助未明向量，绕过Certificate Revocation List (CRL)认证控制和访问安全的web服务器。
solution:Upgrade sun java_system_web_server to a higher version than 6.1,and avoid the version 6.1