CVE:CVE-2002-1471
CNNVD:CNNVD-200304-120
Ximian Evolution 1.0.x及其早期版本的camel组件在检查证书后建立新SSL连接时不检查新证书。远程攻击者可以借助中间人攻击监听或修改会话。
solution:Upgrade ximian evolution to a higher version than 1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,and avoid the version 1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8