当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0102647

漏洞标题:宜信某业务官网服务器存在Heartbleed导致信息泄漏

相关厂商:宜信

漏洞作者: Alen

提交时间:2015-03-22 16:42

修复时间:2015-05-07 00:08

公开时间:2015-05-07 00:08

漏洞类型:系统/服务补丁不及时

危害等级:中

自评Rank:8

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-03-22: 细节已通知厂商并且等待厂商处理中
2015-03-23: 厂商已经确认,细节仅向厂商公开
2015-04-02: 细节向核心白帽子及相关领域专家公开
2015-04-12: 细节向普通白帽子公开
2015-04-22: 细节向实习白帽子公开
2015-05-07: 细节向公众公开

简要描述:

宜信某业务官网服务器存在Heartbleed导致信息泄漏

详细说明:

攒钱吧是宜信公司旗下理财服务中介平台,提供P2P定投理财中介服务。我们首次提出将定投与P2P结合的理财方式,定投有“分散风险”、“积少成多”的特点,P2P有收益高的优势,以定期、定额的方式将资金出借给经宜信严格审核并且资质良好的借款人,可以一边攒钱、一边赚钱。通过这种方式,可以培养您生活中良好的理财习惯。

http://zqb.creditease.cn 
IP: 114.242.166.203


1.png

2.png

3.png

漏洞证明:

TTP/1.1Host: xinghuo.yixin.comConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36Referer: https://xinghuo.yixin.com/account/accountManage.shtmlAccept-Encoding: gzip,deflate,sdchAccept-Language: zh-CN,zh;q=0.8Cookie: JSESSIONID=6B7A74284FF8418B1EF0F4D1AEF4E292; LTAPTCHAID=306d8f4d63c44159b30dd9afba0dd05c; Hm_lvt_67a56894da031f6ebb6a5e923e831b45=1426767738,1426818007,1426831733; Hm_lpvt_67a56894da031f6ebb6a5e923e831b45=1426844663; referer=https%3A//xinghuo.yixin.com/account/accountManage.shtml<cY6-_!|a7jEIEM:'=@gZ>\=HT[iw?+Jin.com/account/modify.shtml%3Fpage%3DaccountManage_4realName=%E5%BC%A0%E5%A9%89%E7%8E%B2&mobile=B2DB909BFD25EF2C6C99589E76DCAA7238DC1CFE76170259&id=350521199506121521&validateCode=167345t1=a5}RCXY!@s))$x>Y68z/RY*~J1l a=,v-`V)3X`dHL1Sw[]*+`gJFJ`vYG;2bvf[t"b6"wViz2#mz<;+1O1{mEk,VN8aAXA'ElL4/^ipRQ`rm@8aAXA'ElL4/^ipRQ`rm@Lz.}`Q)[Y0dTrLz.}`Q)[Y0E<`O/+(<|tnlS$F]`4l;q7.,J&)$ub`D\:k<]Jp46YS[TCM'Qt,CI#*!P,~A";8Xz)B0>2Vw_ua8hT~O*EEk=^~q}]HcQg1{Oe=mOkkdqX<ndb .\.\VT@m^HH~Iq_Bz~cJl:c9?SQfy-Or~}}B$w-"YM-,@^)3Sydz$OBsTE`>ZC-2N,j%LSm4"myai>/gA]Iik._E}%57e"SDp<0|ET!4D{'o-T9|pGjwx0U.1g$AU}G.7N.GM8Ir_s\[9j]a.'2W |-y8LHHNA(KE<`O/+(<|tnlS$F]`4l;q7.,J&)$ub`D\:k<]Jp46YS[TCM'Qt,CI#*!P,~A";8Xz)B0>2Vw_ua8hT~O*EEk=^~q}]HcQg1{Oe=mOkkdqX<ndb .\.\VT@m^HH~Iq_Bz~cJl:c9?SQfy-Or~}}B$w-"YM-,@^)3Sydz$OBsTE`>ZC-2N,j%LSm4"myai>/gA]Iik._E}%57e"SDp<0|ET!4D{'o-T9|pGjwx0U.1g$AU}G.7N.GM8Ir_s\[9j]a.'2WIr_s\[9j]a.'2Win5&-/<n)pIok"K+<#Ux-XD$}+iyrdm]-iqPea~y?-SzymdN|/F&C2DbXISqtV7V>YYMA+97cPua9NVn)k_FY=z\LqI<:$ry%Fi.xW6q7(;Z_rtNE4:ku%^&gM;yGqjkL15q*!`$m$h QJuJwvLN(9{i+y;]v[n[|Ih~hK1p$T1G&r\m8zMfWKT}fJ-i+GikuVu,ci,+m!#u<4[dyh76:Vg7J:'K;7~J^]vzom,UK|S$Twl.Y9-%^+YcH~dF2Wst[rUIJjn{oF<QZ']oZ:/_Ou,l,.lC5\u- ?{F|6F)I6(i[(uh5>onM-Z5-]ROu{:9[[xw2X4+{zlcCjq>*RpqUi]k&wsW5Sif;7]Wvhe?x;&ik7t6"MCJrN&4OQ%4Mh?)uK$STn_i1JwmN8I{:tZRM)~gwj7hNl %okf[Ol3%K%! K;VSn-J)ZWwvIZ7y;xsJ4S7-yQj6vm _mGiM5P/DqD;/_*dH<n\Rz(6VhjjRN7rM{zw:7O2v4\\;6edx*e#(bWwRKj|E;-IG.;'|-#WY[|x[[RjCE6Y6.Y)-YuvvwvW=M!3Ggviu}&KIW"E=+f%{:m4u[*|Jg{.UDbOrZ3#eV;S7q7*5+J|VKMuVj):6@*,$5MTp2pOd-WN]l%IfMjoi&Ao?|#d|8Q!1n%,L2.263TP+Dr\R+E&vI6IzN=/Q{+4QQ*vNi7k#jUCkYm=3nf,x"VPj-^zSJ7k_}5k2*3FFF2FrORHx|3%Z+9E(+&f}wT>W2m&Gw}/m.,u/41(?0K$a~KaI;v|E)G;j][OYT*|Vm4ku~Ao%tyChI$pG#'GY%{Bk&TbKK[_[kl7z#N|E|(Hks5zuGu{Zm."WWz}UMs^e.><7I6+n$ROIRsG7KEee{wfJ<rW[%{l/|;D.jX<1gfN)7E$MUNwRm%m4~e{/A_';2\Sm^q\QR|{+UTR;TiNmsh5/_4#j:3np*99~*6J29?;_})^R|ImU?'71pN#]ImUWaB%ETx1npriS|/&ou;[vzt9JsZ&nySB@tY$2dw)[1+d(Pp,0npnQj)M]6ewtF[v/s4fIcLE<|wIVwSMsE^IY[}Dsk'{nmr^+;m\_%vM:T1uqRBM=6f6qM[6ku5g:'T8c"RjVrt{Ii].z]6e]f7;M<?d+~[$no-7Po{;I|W[4Q%E%BKpc'P%WK0'p> l'%wuRQ^mRk6ShRS`_iOn>Q58^/hOE=tz/fw%6WRYD]GP1aqm{5K7X0s E$SW{VWZ^-(ORrmRo${C_@C,Jq(2FSbc%KJWrmQ'ms+&4)rM_wnnl9jl4-n@^I,O,n#LJV=%N[J3=JSMn$gQSVx\oawxKZ:t-fO]]BY(Yc_US4Ji[QJ.eGyE-&Rzmi==5$\;IC+9@f2TcP%I?tnfJ2Uk4y0c$i6^_\'Fld4h#*I7VKIzoI6gukwQ0eeJ9Y*a8Ju/"7y7m;i~_44[ ?,u26GL(%sqi{5e]Z}(}y=-w9k08@P.?B\qqrxR}4{4'&J);S}ww9<xxc8b@8$|' 75%ZBihfj-RmQVidmv?*kz +HrNXuj^8sRqzTN-=7niTM6OJc:"f8PnpP#!qUO?j]I)5;=6J+PhB.2&NCqHOqz_ow------WebKitFormBoundaryQEAKvHdkMleWInRt--T+#~TN*-Zv[-kV<{!I,IblX9tQoFjkVM{D'r02.ys;UX=3uniCmtR]$RYq0SWAU9RI;:i_[E]nrD]y_~{Z%5}SORIs)M!x14InjKqmotIfyutb_M~\j?C}2#i_S iVWBH,[3N3]&cwk6^W\Q7(iummZNZOoi$qme]=00k+17K&XxIZm}u[YZBNPV_zz{=Z2Ai._y?`pAo1$-:tm$;ke5{(]k{VjoZn27U}c&mh-Fkmwfz'{[TtguZ7f`o.!X^ $1\J~$w+E5_ku{4[h_s[=l%<,IBY0Ti1Wd[^unuWHYnM*@#V1"\i4Lz>^+9u`HyP]1i*\DFBNo{]{uM&sm+4Zi A%i9u(&Il-uF\ S3MrFrr3QQAf=7O]Mi_)m]T|BEggum<kB ?1p2I,~>~[(.;]/+NLshN)]okiy;qdU_J!!rF$Rl!]O#%mowKEW{7J]iunr.}!8*$`N!,v)RI([vn.%5}vvdtv!wWr\smiMYs7t{-[L.(??Z[Yy_d{%$pQ|I4?v"0$xXc>vbm=}W/{%fmPN\Q]<PIEH"[vvUFv2!DqJYnb)JM5'-y)=[";_W/D:YtyVYmY1de[I5wo&{7SzkY--SU:O?3&4Q-;!TGae\#k^m;_[1;FJwIo+vKb7O`x\*}V58E!_H20LYn`ySNIr5wJ4[UmwZe~,A4/PUdt>dlUL,Byne$u%n=[wZ&4SK-pIKY{%L3og*QKv;$bT]K]^W)r{mIF6OMA.ROg-U{w\?LgB&)bC*LedVfV)0rf1NN1\5v;oRT){Gv.Wf|!6esX.YOj+0+nP1-e&MCO{Y-hTIZnJ*)rJvls,tOcF*4.!`)yT2Rz_vO\zSvvi){n4IoxF<0BY_e`R<q383Ofcwrj[)s8=l_%).y4N<Gi.WWm&|h8'$&nT+btVJY+Z-dF%Nn9F9+m=4uY~1-L$>\_ZbFBuHb)TIaJ\E~i#$mbO][Ex~~/<;-iH"Mm!]17FJ]IVR[+u6ZNqiY^RNV=SoZg}:TJRK9w{Cb%UWgKTtZrOIn2R'toqo|GvY]X8-/o?<r3O/z.[rj/c]8UI95+JIs]6^Rvmm]x/[4M;?*yS5"h\FV5RrO]Om'-/K\]<mF"%*WRr5_FV4sU+:O4FY1\Tk?;[~e{[zkeE}lck)Kiuc>~X!I{[/y}qz{w~5dbGAPF0E+l',W]>%}K})I~w}o^&M'(*UD2K9BRH+q#elZV}MV\Zg}/xU{GY/.mKEai\A{*dq(Wl*ta*P*3VeJH$.k.]7~+.]]o.e2Y;&MZIm%YK!cpn28qlSPm4kFJ%}5nr)nM58c0A)!&F|c'/i7iOV*N7>g+TemPY3n`~leg24si[^g'NZz66jj]S<4QNknO<Ry5(a*D$|G2DjqIJ^5QnrZM5Jo+u7"9PE#l:92RApb@EIgroT<vn:v#W|-d}'/sb;W?4?>zY9h}<kvi~.Y-L(OY#/+t33!`>m.~TInmIY{wW$iI9%\JO[--([{,vMBCq4*Fb3v<m!,,>Evwjz*KW#w$+];KhzcNFe$,i$,$(DD'9,7IyFB({]]{Dpn5V^[D<*y[0IHh-$hw$J]efgdwl++tI^&H6{\+xGU4yr[E!)'&s(Py7.J-Gj)E'|ti&4&7f(2!<aky$7p[b*XQJn}8&\^>jrmiJW[M^kK=VOUq?tn"l^Z=1@'2B+3HKySS51ujCpJJ5~2>=nY}QZIZ"|$872#K!eERHg"E.R(ksT[oM{n{=/$hz|gEd:gTe`$rNF%IX(*v]o{7[kJ&GRNV7Zlm>-|-!fI*oJ2)gz>Wfc%4/onIYngm.\zul?4-~tImd*s92cej*Q*Qy$Uyl)\^^KnYw'tivCl$0K<Y$K>ddU.4c8(t(i)^-wytVR+ZVn;VIYt"k2Nj#cL4~9Uh85$}ZNTqz-]M+JH&kA't7$7Wl!=eDL<!RRGPQ[^ZF"'&'WD{NNhe6W*iSG$LK+BF4`]K^Ic))I5;6y]m$fQOUM7+$y&o_(_|iOm(5oem>(l-+3 Q"[},LFGz(4RJ)Z\N:T~q7wejr}(O]Ko4cK}Y)$VE]?O{J2NT4e&I9$/I]Z.u!2h.pgg-U,,WINnc&92')bYw0v<8-.OwZKKWotX+oA5R20aK:YWR_MsOW}Mbg;sL+yew)b+*qZ]^7k-ek=Vpts7K:~\c]I+wKym-5vyl<stD]CR6l~lm4'usKniQZJ)-cVpIig)wm.W7+i4d{wnO=:VM^k{{$5e@5QH.yP#T]Y2/g\li.d~N/*of{6voggCv"my,:y+am'sm{4WR-KWeeqrjR5nk&.vfVV{+Z+(={j^[ZC3k(7ZOq&'!q$iQnZ5jkFdm7dwMK5u.tV<htvK|4kb@YYC7ib$}S\M[wdi+gMw3q5zooWu'<Z5KbZ2B# vR+k+[]vW{f(E+s+ny{[KZ%tP2m,83>I=I<x8]~~3}4y-[7].t4A]3[ rWrM%=i.Xj2r]Gj+Td?$eWO34eS#<yfUL?;-b`"r$ud+dm7vV][qW2i fcj4TBMA{;M$ImXo5m7MkCp-k,eTM!]WLI6MS_jZ,[>K+.jDELqt2JDi("=%Z]5v]X%ng{'tkwz]--TYQFrDbu<y"X$(LN2nzZ^Jw|&}Tmk'50LfFlHBh[Kp<$#qNN|I/zKT]IKOIoIEPC7_1{\[FRZ}%zDgf}f,#Ik1f<4kS15oY!|;VnpWRK7>kNSI.]o&Y}W.%XF2#)>|1|}i)6)(n{wea*2ONVeMuM>W{,M++'i#xXg$Mtu$6ZFvMo~niw."L"F^?3YHGO{xr<WQ(9Gk+-o{>W^;T4zO-m4d85B!_5M%<r)]F=M3<l~wofwvte$RWRW^5oX$)r%)4O^BvB4NiQKU[mIjKsKF&kEkbIw$U$^C8a#9<\Nji't{vwM6yOxMOOyKyUng[GLhyr]\MDjmRqR~M'hM)iy&ni7x'W$tR[_o~/KQ4K;hrO.Y/<7Ny9Lxair!Z!Z7%)Etm&6}NRJNmI9=M9I.v4Mi$1[\o6Blfe["$pOB]Bw\6Rz;v$:kD}[\\}\crR|#vCbJI%k7%}_Wfium=/^t}'w('wUi#R%mA@%$)YOoV~B=o[ym2UpAFCAemt,IbKy%e-nRZ{yttMjI[NUYo1Dh2#ARBJ<RM[^6Wm&+4'k?#/,-_U#b0jw&_];Vo*KMqZ\l%B*Se(;ZH*{)*U%I[??xZtn$pA3>ozt;.Q1#N<~eNoKxIX{NzfzLRHVaGosve^,_czDk;%wdsmMQffiZ%j:Mt%y.VfG7s*\o1SR)]ki'em_l}o--K[}dPr<'d6F3\VNY|c#8oz[jGr.)_}2mWga +!vh`B.c*$bw)GHYd$m,5.YIkmmvD:L`y<J`<Rq X2pw[(>d'X\J[w7,.&mpdoxO0!/IjWWvi%gU$n{jDdc*f$h&)V.U52v#[W2z}v}}4v]cY1<x.nDD;#e3T-$$vzwVR4yW2zo&-~(qRm4jgxi"D)9I^2/dvNF9BRMn^TD0,LvI!]Kk7:D1oRmf,~}NIIO[^W[_kY]9-<%Snd@ko&f%T|EnutZ\FiWnZE$d 8gRL/qc;,PGH.<#ss.Vk|kKqZkt*rTyQjMw,SDI"IJy%XgJdFc$ZKXY'y\OFrB\q|^rJ@l/g\S&9F01^DHrj_/A~c,IyzaB?|zD%lMA,0"z1n/%E^Bne6D.]-cfcImcT.d..J&Chct'M~'dcbO4^9i1/i;m P?,B"?9~*1>g/n?R%?q~<a{^[@Yk|]6^*{2%}Nj9RJ6?U\$M^KR1Yr(kR JH24Oo7OJQn6Z*u(}*JV#%0Bh&#ki@ZUIJ$BQK1cWUUqSSMi6ZO3dusBzM$JJR>V1if9s4F$}:j_H$FEsDI$sn/K}:VfXG/4lZ#tit-hvP52$)&7_W!<Wl*U\rYOT+P"9S"U#YHtEj-nmzBRh!i%Iy2*K{oYT5!Sj*ql:K"RW0Rm.3+y&y.gF),S$7Z##oKhSGi"k vx&vHYle?RKGQR[OA,*Yoed]m:^UjV+MBO.GI#5bd`c~f.u)!F&W4}bK~F**moBZe+PJp:I+U HZDi~?p~>vi=L`+cGK&SjXlla*'ZwWxq~JAjJFOmz4:()~42X?w_o<:y4yZZ!k ~h_(InzI'OH~&'27<0w?zM0QMybEo%Tl+f44"jT"O"W22-D"#Fv.NkN-NbH#ko(;,)uO$ji4+R*t!K)-GH&jp-X7mBEUH{G-!xJ31aU`4'aTj;<"{}2D6[W9?CgW^I)bz4jm:3L(ts+r"="em0,;HJ7&GVeR.?+7 Vm=K=4&|a5`RJf@1%$fPS*6%(0I"D`AccsF mW9TF*T<#M4)J&@-$`1>;>*T|htClT1pnh+"j:A/~^t3;+yH_nxWX;FVX(erVx9ym/I<DI&PmoMZ0W!=21q^Gz__-=K\m??<3-[Wbq/`l\[E~:DJ!TbN;=.zomB_)##0`v<k/Au-!/)8JA3VG%"M]z=^t\v=Ote?)R?\}4kWGO?\v9~Sn>?\dG;/]Ot?Y|'WroBiNZ0q|<u/fQ ]7bnNGe.*PmZT"[4L0Tqi|'^;~j}:JJRfBAD7<-k{Z:XCP:-PyFM8!Lm^c8fOm]HLx^?))tkZsLtTQS,|T2INFbsW]6&gTzvBZ@J3)D&1 3XDPb$AA%0[oiUqn4Oa)!"sYT"F4?CFeiwBPl&U&yGQ&<Z7"k4]&I*#7a{(*|CV-I)3LKZyeRhttJR)Y@Q2"JC5kz$=9YZGuzZ|1n5)Rq%w66*)(de96B+R]qc=JepQ=8L<Q\aFBk[51R^te;RT@lxX/9E^jA[IM="qO% ROe.e/9a6nQ>B"eLvAX.#ClNRDE}5bD9@|l]7yOG;(SN=$o2DCRm\fhjuA$2Fob[FNj*mMW(Jv9DnU~b.EM8*3BnUQjf,!kw%*IpgF(pTW(Jrik94jepLJJF&vimCZr-D6[n_OL7R6G\b/0]!?Gi_+YtRw*>'"JDew/Ak9tV&X%a5B"t.t)n(%2Q7QGp/z!@ ,LwS1qS4JHHGRG+Djj5zH6ZJ45UJd_wuO7`SP[e$32,T\RSQlZ&3FUtLP@SJ8_|aZ%3?`KJ:S4&ju;\'(E rC$=X@51)UWlkU1h4.zGQy#aAURKti[F@2I6Qcn[z:&S7`\sj1MakMc :eqBBY#l_qh[Z.F NS)L!%fu@92A_lzkeoXu2A9EsleUMMH-.JE Qby84=xr=<Jjr&iBzRB&"y*)UcHWs)PA6J"cmiCiuRA7FMMs`[iR[@`t+c+Iq4yo;U.FF,55K.6-Ri5j5o(IfdJbi)cS)/EOic@nfO?1O1t_fDG"&)W~x @3?8h.H&{7 uMv[WxmtiM8%yTrFtdi;o+l2ebLZW"YM]r^5{U^zzbR+D) 9]qxO>5=n|)*eaj(,jT/eE!zT.SsQYOSDM|vck#YkRfrf`S3b[~5R-zWHpw6I !XIh-rts^UTU#d,L"',m1tP>DxXBTTE;q(w*:t+!)35ZS?}&](]>QRN*E}+u3_.*jDlfh:KavR2$;7#-*rn<-F( w=- hbnorN1!^AW72 $8}%`@O-:W)I[*<rGt)EJ^U~ezAG"YS&vc}?h-hZk?MTIAJ*$9:bM-s6G}lY!$}(G;z1+UP.:0)QvtiVIQ236MImIQ@p~_ w2{LjFJh%7F'K:4-W}d}cx3Wh^[~UXJ0{^;iDf-I9HF\lQtjtBVU2VQk0@JiP)j@OH@%Vue-y${ QhTqMk5zi51hjNeSR'2J3unuWC40ABiU@JHSaW3+7(B\[v\o[$D">RFq&k0ss^5M-&n8eqh:dJ jUCB^Os1frPyJTZPwrFT2`{=ao*.HHOna#t},M~gW'Mf;rTYI-n}-q1 %Rc2&VQ*O-Hf+gqJSfJ3g+19'UgJCLR(bz1$j%F=Y:%ei,Tkg=3k[YF*#N@mz$8yf%WacPsE]X_,,5R"i`@wIO^}C"{J\O30n{Ogxy`QzxdI/'-7''i=!Bs*3cg>6?h}^D/>3x.x'jBs&3M'd6UDkZ]49M~*nd(T^x 36q;H86L0'H@wk#W>Lx}h+uH!)m<m;#"(OpZn<O1-Pw^Y=Wb<y#7::{wcsYofWOy!kNW0vgWy#s{U+tX>>I_K_Tm%pYb<( Y9*1E&=]=QZ%9I+8qz[p }>nEmMm]{$ ARMD8L0%yfXlRivaJbHB4ughH&F*czV|x(P9U"\>7`%UZObE&L":/4v/4YWnD~oJE]VgSt"AvWQWAIq*`Lz{wzxtZVZ.RU)AI"DRm{-\[z8$_]r\WDIIn[0":mNIH1JtuO&*PJ%5ufR=TMN6'<:QTfRiR$(4L.^TiH:&s;7_-l\krUl*zcrf3"kGH+H1v>9-ZG['|oDST-9VaMJ !o-(w7lY~rgO,Yhs73,ebB]5Qca&sQU14=IE}K-B`8H1vghzN]UER[R)KaH B_3Qd{dlUYSR3KF\JHn*-TYd1n_eWt-gIyeXP@R$[)F}5n>Fz_77J=]J,cvZbpaH@)6#6uYo>)|':n<dvu\AUQSMT}V1EBGzvuzSlh)hZfT' S"Lb|?lXZ'i-T)m=)Rt)L7)_69R76[d^6N@w6{.TRm6+Tr%amMgnj+JN`HsH4gSU.R^i0d,r',mx\{yma\F7l)gAQm*-B@ctG#}wV)*!A" }+iL{Ym.!%ahRs%aO< Gqr~\Fm*lSs!0cP0p$t0$BHwS+D}BxL?FWH,:<hQVTKm6ZEB)qM5T?'0\qPhQ\GmD:DKceJ`v0+c p(OM'\ <{4Xrjy>q+SxLuIOI*!eO+CIl/n_XU91&bXs,D[ZLjm0<S5uRsKS:~$Te9<9!ty#3AxUW4IL^Zb&MT)Ea/sw^Gww'nk~yz",^[6OwW; Q,;lMH&xB\75]G#:>BR1yi}m*--WL[Hju-9%.fL$r<6\VY3"ZO\z)R5lv55h]W.k:S:Jy3PipNQg|xZtM]]h\b"]F3sp1c-h6eJ&V\'-JSg>dojQc`;PEcMZTpOS+EH{EESiJr"#F[o4wEjF,?TH'k(O;KJ"s(u&-CYZWR?Wl?p?HEr[vZGeiH@Iw?|B+}?ZFSs?Smd)GzFC5yCs,.uqe@it%~4cVLk<fdzt5inJiR/\h??}a>:}COZ26C!@SEH8i>UJa[R_1mRp4Kl_Jit6L(&s5__7y6n=uT,?4qbYyD$LK.`QCCr$E5brJ.VUX@60{SliZKvLBJ e&L}Us*N(!1g4s=(iEEM8/=Ny0AwS4kJsJKuBmI2RI"#J}5q:m-K=C+iUUU\rTkg_^T)('H&I&$,{lE(h/SSL)1D"]R&mJPHTBb!!gQg|mlKe](X!iI`V|2K^O9RCM=6V7n7%u7uECR%!0=BBx)oOi3*qf^^H'b~X]8x

修复方案:

升级到openssl最新版本

版权声明:转载请注明来源 Alen@乌云


漏洞回应

厂商回应:

危害等级:中

漏洞Rank:8

确认时间:2015-03-23 00:07

厂商回复:

感谢您对宜信安全的支持与帮助

最新状态:

暂无