CVE:CVE-2005-2946
CNNVD:CNNVD-200509-149
SSL protocol是美国网景（Netscape）公司研发的安全套接层协议（Secure Socket Layer）的缩写，为互联网通信提供安全及数据完整性保障。
OpenSSL 0.9.8版本之前的默认配置使用MD5创建消息摘要，而非使用强加密算法，从而使远程攻击者更容易使用有效的证书认证机构的签名来伪造证书。
solution:Upgrade openssl openssl to a higher version than 0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g,and avoid the version 0.9.1c,0.9.2b,0.9.3,0.9.3a,0.9.4,0.9.5,0.9.5:beta1,0.9.5:beta2,0.9.5a,0.9.5a:beta1,0.9.5a:beta2,0.9.6,0.9.6:beta1,0.9.6:beta2,0.9.6:beta3,0.9.6a,0.9.6a:beta1,0.9.6a:beta2,0.9.6a:beta3,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7,0.9.7:beta1,0.9.7:beta2,0.9.7:beta3,0.9.7:beta4,0.9.7:beta5,0.9.7:beta6,0.9.7a,0.9.7b,0.9.7c,0.9.7d,0.9.7e,0.9.7f,0.9.7g