CVE:CVE-2009-3278
CNNVD:CNNVD-200909-401
QNAP TS-239 Pro和TS-639 Pro固件存在加密问题漏洞。安装有固件的QNAP TS-239 Pro和TS-639 Pro运行rand图书馆功能来生成某个回复索引，这会使本地用户易于可以借助一个强力攻击来确定此索引。
solution:Upgrade qnap ts-239_pro_turbo_nas to a higher version than 2.1.7_0613,3.1.0_0627,3.1.1_0815,and avoid the version 2.1.7_0613,3.1.0_0627,3.1.1_0815; Upgrade qnap ts-639_pro_turbo_nas to a higher version than 2.1.7_0613,3.1.0_0627,3.1.1_0815,and avoid the version 2.1.7_0613,3.1.0_0627,3.1.1_0815