CVE:CVE-2010-2306
CNNVD:CNNVD-201006-272
Sourcefire 3D Sensor和Defense Center都是流行的网络入侵保护系统。
Sourcefire 3D Sensor以及Defense Center的默认安装状态下，多个设备和安装过程都使用了相同的静态SSL私钥，远程攻击者可利用中间人(MITM)攻击解密SSL流。
solution:Upgrade sourcefire 3d1000 to a higher version than *; Upgrade sourcefire 3d2000 to a higher version than *; Upgrade sourcefire 3d9900 to a higher version than *; Upgrade sourcefire dc1000 to a higher version than *