• 공개일 : 2009-11-10
• 변경일 : 2012-04-06

• 위험도: 5.8
• 액세스 벡터 : NETWORK
• 액세스 복잡성 : 보통
• 인증 : 없음
• 기밀성 영향 : 없음
• 무결성 영향 : 부분
• 가용성 영향 : 부분
• 출처 : http://nvd.nist.gov
• 공개일 : 2009-11-10

The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.

• CERT, TA10-287A
• CERT, TA10-222A
• CERT-VN, VU#120541
• BID, 36935
• FEDORA, FEDORA-2009-12229
• FEDORA, FEDORA-2009-12305
• FEDORA, FEDORA-2009-12606
• FEDORA, FEDORA-2009-12604
• FEDORA, FEDORA-2009-12968
• FEDORA, FEDORA-2009-12782
• FEDORA, FEDORA-2009-12775
• FEDORA, FEDORA-2009-12750
• MISC, https://svn.resiprocate.org/rep/ietf-drafts/ekr/draft-rescorla-tls-reneg..
• MISC, https://support.f5.com/kb/en-us/solutions/public/10000/700/sol10737.html
• CONFIRM, https://kb.bluecoat.com/index?page=content&id=SA50
• CONFIRM, https://bugzilla.redhat.com/show_bug.cgi?id=533125
• CONFIRM, https://bugzilla.mozilla.org/show_bug.cgi?id=545755
• MISC, https://bugzilla.mozilla.org/show_bug.cgi?id=526689
• MISC, http://xss.cx/examples/plesk-reports/plesk-parallels-controlpanel-psa.v...
• XF, tls-renegotiation-weak-security(54158)
• VUPEN, ADV-2011-0086
• VUPEN, ADV-2011-0033
• VUPEN, ADV-2011-0032
• VUPEN, ADV-2010-3126
• VUPEN, ADV-2010-3086
• VUPEN, ADV-2010-3069
• VUPEN, ADV-2010-2745
• VUPEN, ADV-2010-2010
• VUPEN, ADV-2010-1793
• VUPEN, ADV-2010-1673
• VUPEN, ADV-2010-1639
• VUPEN, ADV-2010-1350
• VUPEN, ADV-2010-1191
• VUPEN, ADV-2010-1107
• VUPEN, ADV-2010-1054
• VUPEN, ADV-2010-0994
• VUPEN, ADV-2010-0982
• VUPEN, ADV-2010-0933
• VUPEN, ADV-2010-0916
• VUPEN, ADV-2010-0848
• VUPEN, ADV-2010-0748
• VUPEN, ADV-2010-0173
• VUPEN, ADV-2010-0086
• VUPEN, ADV-2009-3587
• VUPEN, ADV-2009-3521
• VUPEN, ADV-2009-3484
• VUPEN, ADV-2009-3354
• VUPEN, ADV-2009-3353
• VUPEN, ADV-2009-3313
• VUPEN, ADV-2009-3310
• VUPEN, ADV-2009-3220
• VUPEN, ADV-2009-3205
• VUPEN, ADV-2009-3165
• VUPEN, ADV-2009-3164
• CONFIRM, http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
• CONFIRM, http://www.vmware.com/security/advisories/VMSA-2011-0003.html
• CONFIRM, http://www.vmware.com/security/advisories/VMSA-2010-0019.html
• UBUNTU, USN-927-5
• UBUNTU, USN-927-4
• UBUNTU, USN-927-1
• UBUNTU, USN-1010-1
• MISC, http://www.tombom.co.uk/blog/?p=85
• SECTRACK, 1024789
• SECTRACK, 1023428
• SECTRACK, 1023427
• SECTRACK, 1023426
• SECTRACK, 1023411
• SECTRACK, 1023275
• SECTRACK, 1023274
• SECTRACK, 1023273
• SECTRACK, 1023272
• SECTRACK, 1023271
• SECTRACK, 1023270
• SECTRACK, 1023243
• SECTRACK, 1023224
• SECTRACK, 1023219
• SECTRACK, 1023218
• SECTRACK, 1023217
• SECTRACK, 1023216
• SECTRACK, 1023215
• SECTRACK, 1023214
• SECTRACK, 1023213
• SECTRACK, 1023212
• SECTRACK, 1023211
• SECTRACK, 1023210
• SECTRACK, 1023209
• SECTRACK, 1023208
• SECTRACK, 1023207
• SECTRACK, 1023206
• SECTRACK, 1023205
• SECTRACK, 1023204
• SECTRACK, 1023163
• BUGTRAQ, 20110211 VMSA-2011-0003 Third party component updates for VMware vCen..
• BUGTRAQ, 20101207 VMSA-2010-0019 VMware ESX third party updates for Service Co..
• BUGTRAQ, 20091130 TLS / SSLv3 vulnerability explained (New ways to leverage th..
• BUGTRAQ, 20091124 rPSA-2009-0155-1 httpd mod_ssl
• BUGTRAQ, 20091118 TLS / SSLv3 vulnerability explained (DRAFT)
• HP, SSRT100817
• HP, HPSBMU02759
• MISC, http://www.securegoose.org/2009/11/tls-renegotiation-vulnerability-cve.h..
• REDHAT, RHSA-2011:0880
• REDHAT, RHSA-2010:0987
• REDHAT, RHSA-2010:0986
• REDHAT, RHSA-2010:0865
• REDHAT, RHSA-2010:0807
• REDHAT, RHSA-2010:0786
• REDHAT, RHSA-2010:0770
• REDHAT, RHSA-2010:0768
• REDHAT, RHSA-2010:0339
• REDHAT, RHSA-2010:0338
• REDHAT, RHSA-2010:0337
• REDHAT, RHSA-2010:0167
• REDHAT, RHSA-2010:0165
• REDHAT, RHSA-2010:0155
• REDHAT, RHSA-2010:0130
• REDHAT, RHSA-2010:0119
• CONFIRM, http://www.proftpd.org/docs/RELEASE_NOTES-1.3.2c
• CONFIRM, http://www.oracle.com/technology/deploy/security/critical-patch-updat..
• CONFIRM, http://www.oracle.com/technetwork/topics/security/javacpuoct2010-1762..
• CONFIRM, http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.h..
• CONFIRM, http://www.opera.com/support/search/view/944/
• CONFIRM, http://www.opera.com/docs/changelogs/unix/1060/
• MLIST, [oss-security] 20091123 Re: CVEs for nginx
• MLIST, [oss-security] 20091120 CVEs for nginx
• MLIST, [oss-security] 20091107 Re: [TLS] CVE-2009-3555 for TLS renegotiation M..
• MLIST, [oss-security] 20091107 Re: CVE-2009-3555 for TLS renegotiation MITM at..
• MLIST, [oss-security] 20091105 Re: CVE-2009-3555 for TLS renegotiation MITM at..
• MLIST, [oss-security] 20091105 CVE-2009-3555 for TLS renegotiation MITM attacks
• CONFIRM, http://www.openoffice.org/security/cves/CVE-2009-3555.html
• CONFIRM, http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
• MS, MS10-049
• MANDRIVA, MDVSA-2010:089
• MANDRIVA, MDVSA-2010:084
• MANDRIVA, MDVSA-2010:076
• MISC, http://www.links.org/?p=789
• MISC, http://www.links.org/?p=786
• MISC, http://www.links.org/?p=780
• HP, SSRT100219
• HP, SSRT100219
• CONFIRM, http://www.ingate.com/Relnote.php?ver=481
• MLIST, [tls] 20091104 TLS renegotiation issue
• MLIST, [tls] 20091104 MITM attack on delayed TLS-client auth through renegotia..
• CONFIRM, http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/..
• MISC, http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti...
• DEBIAN, DSA-2141
• DEBIAN, DSA-1934
• CISCO, 20091109 Transport Layer Security Renegotiation Vulnerability
• MISC, http://www.betanews.com/article/1257452450
• CONFIRM, http://www.arubanetworks.com/support/alerts/aid-020810.txt
• AIXAPAR, PM00675
• CONFIRM, http://www-01.ibm.com/support/docview.wss?uid=swg24025312
• CONFIRM, http://www-01.ibm.com/support/docview.wss?uid=swg24006386
• CONFIRM, http://www-01.ibm.com/support/docview.wss?uid=swg21432298
• CONFIRM, http://www-01.ibm.com/support/docview.wss?uid=swg21426108
• AIXAPAR, PM12247
• AIXAPAR, IC68055
• AIXAPAR, IC68054
• AIXAPAR, IC67848
• CONFIRM, http://wiki.rpath.com/Advisories:rPSA-2009-0155
• UBUNTU, USN-923-1
• CONFIRM, http://tomcat.apache.org/native-doc/miscellaneous/changelog-1.1.x.html
• CONFIRM, http://sysoev.ru/nginx/patch.cve-2009-3555.txt
• CONFIRM, http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released
• CONFIRM, http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES
• CONFIRM, http://support.citrix.com/article/CTX123359
• CONFIRM, http://support.avaya.com/css/P8/documents/100114327
• CONFIRM, http://support.avaya.com/css/P8/documents/100114315
• CONFIRM, http://support.avaya.com/css/P8/documents/100081611
• CONFIRM, http://support.avaya.com/css/P8/documents/100070150
• CONFIRM, http://support.apple.com/kb/HT4171
• CONFIRM, http://support.apple.com/kb/HT4170
• CONFIRM, http://support.apple.com/kb/HT4004
• SUNALERT, 1021752
• SUNALERT, 1021653
• SUNALERT, 274990
• SUNALERT, 273029
• SUNALERT, 273350
• SLACKWARE, SSA:2009-320-01
• SECTRACK, 1023148
• GENTOO, GLSA-200912-01
• SECUNIA, 44954
• SECUNIA, 44183
• SECUNIA, 43308
• SECUNIA, 42816
• SECUNIA, 42811
• SECUNIA, 42808
• SECUNIA, 42733
• SECUNIA, 42724
• SECUNIA, 42467
• SECUNIA, 42379
• SECUNIA, 42377
• SECUNIA, 41972
• SECUNIA, 41967
• SECUNIA, 41490
• SECUNIA, 41480
• SECUNIA, 40866
• SECUNIA, 40747
• SECUNIA, 40545
• SECUNIA, 40070
• SECUNIA, 39819
• SECUNIA, 39713
• SECUNIA, 39632
• SECUNIA, 39628
• SECUNIA, 39500
• SECUNIA, 39461
• SECUNIA, 39317
• SECUNIA, 39292
• SECUNIA, 39278
• SECUNIA, 39243
• SECUNIA, 39242
• SECUNIA, 39136
• SECUNIA, 39127
• SECUNIA, 38781
• SECUNIA, 38687
• SECUNIA, 38484
• SECUNIA, 38241
• SECUNIA, 38056
• SECUNIA, 38020
• SECUNIA, 38003
• SECUNIA, 37859
• SECUNIA, 37675
• SECUNIA, 37656
• SECUNIA, 37640
• SECUNIA, 37604
• SECUNIA, 37504
• SECUNIA, 37501
• SECUNIA, 37453
• SECUNIA, 37399
• SECUNIA, 37383
• SECUNIA, 37320
• SECUNIA, 37292
• SECUNIA, 37291
• FULLDISC, 20091111 Re: SSL/TLS MiTM PoC
• OSVDB, 65202
• OSVDB, 62210
• OSVDB, 60972
• OSVDB, 60521
• OPENBSD, [4.6] 004: SECURITY FIX: November 26, 2009
• OPENBSD, [4.5] 010: SECURITY FIX: November 26, 2009
• MLIST, [cryptography] 20091105 OpenSSL 0.9.8l released
• HP, SSRT100613
• HP, HPSBHF02706
• HP, SSRT090208
• HP, HPSBOV02683
• HP, SSRT090180
• HP, SSRT090180
• MLIST, [announce] 20091107 CVE-2009-3555 - apache/mod_ssl vulnerability and mi..
• SUSE, SUSE-SU-2011:0847
• SUSE, openSUSE-SU-2011:0845
• SUSE, SUSE-SR:2010:024
• SUSE, SUSE-SA:2010:061
• SUSE, SUSE-SR:2010:019
• SUSE, SUSE-SR:2010:013
• SUSE, SUSE-SR:2010:012
• SUSE, SUSE-SR:2010:011
• SUSE, SUSE-SR:2010:008
• SUSE, SUSE-SA:2009:057
• MLIST, [gnutls-devel] 20091105 Re: TLS renegotiation MITM
• FEDORA, FEDORA-2010-16240
• FEDORA, FEDORA-2010-16294
• FEDORA, FEDORA-2010-16312
• FEDORA, FEDORA-2010-6131
• FEDORA, FEDORA-2010-5942
• FEDORA, FEDORA-2010-5357
• APPLE, APPLE-SA-2010-01-19-1
• APPLE, APPLE-SA-2010-05-18-2
• APPLE, APPLE-SA-2010-05-18-1
• CONFIRM, http://kbase.redhat.com/faq/docs/DOC-20491
• HP, HPSBMA02547
• HP, HPSBMA02547
• HP, HPSBGN02562
• HP, HPSBUX02482
• HP, HPSBUX02482
• MISC, http://extendedsubset.com/Renegotiating_TLS.pdf
• MISC, http://extendedsubset.com/?p=8
• MISC, http://clicky.me/tlsvuln
• CONFIRM, http://blogs.sun.com/security/entry/vulnerability_in_tls_protocol_dur..
• MISC, http://blogs.iss.net/archive/sslmitmiscsrf.html
• MISC, http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html

• openssl openssl 0.9.6a
• openssl openssl 0.9.6
• apache http_server 1.3.11
• apache http_server 2.0.36
• openssl openssl 0.9.7
• gnu gnutls 2.6.2
• apache http_server 1.3.2
• openssl openssl 0.9.2b
• gnu gnutls 1.0.25
• gnu gnutls 1.0.23
• apache http_server 1.0
• apache http_server 1.3.13
• gnu gnutls 1.1.17
• openssl openssl 0.9.8f
• gnu gnutls 2.4.1
• gnu gnutls 2.6.5
• openssl openssl 0.9.7h
• openssl openssl 0.9.7d
• mozilla nss 3.8
• gnu gnutls 2.0.1
• gnu gnutls 2.0.3
• openssl openssl 0.9.6a
• apache http_server 1.3.9
• apache http_server 1.3.29
• gnu gnutls 2.3.5
• apache http_server 1.3.4
• openssl openssl 0.9.6
• openssl openssl 0.9.1c
• gnu gnutls 1.7.18
• apache http_server 2.2.7
• gnu gnutls 2.2.3
• apache http_server 2.1.5
• apache http_server 2.0.32
• gnu gnutls 2.1.2
• apache http_server 1.0.2
• gnu gnutls 2.3.2
• gnu gnutls 2.3.8
• apache http_server 2.0.46 win32
• gnu gnutls 1.2.2
• apache http_server 1.3
• gnu gnutls 1.0.21
• gnu gnutls 2.1.3
• apache http_server 1.3.8
• gnu gnutls 2.3.9
• apache http_server 2.0.35
• apache http_server 1.3.65
• gnu gnutls 1.7.7
• gnu gnutls 1.5.0
• apache http_server 2.0.45
• mozilla nss 3.6
• gnu gnutls 1.7.2
• gnu gnutls 2.1.8
• apache http_server 1.2.5
• openssl openssl 0.9.6f
• gnu gnutls 2.2.1
• gnu gnutls 2.1.7
• gnu gnutls 1.7.19
• mozilla nss 3.12.2
• openssl openssl 0.9.6c
• gnu gnutls 1.1.20
• openssl openssl 0.9.3a
• gnu gnutls 1.2.6
• openssl openssl 0.9.5a
• mozilla nss 3.4
• openssl openssl 0.9.7g
• openssl openssl 0.9.7a
• apache http_server 2.0.42
• openssl openssl 0.9.7
• gnu gnutls 2.3.4
• apache http_server 1.3.18
• apache http_server 1.3.22
• apache http_server 1.0.3
• mozilla nss 3.5
• gnu gnutls 1.2.9
• openssl openssl 0.9.8b
• apache http_server 1.3.38
• gnu gnutls 1.1.22
• openssl openssl 0.9.6m
• apache http_server 2.0.50
• mozilla nss 3.4.1
• apache http_server 2.2.11
• openssl openssl 0.9.8g
• mozilla nss 3.3
• gnu gnutls 2.6.4
• apache http_server 2.2.3
• apache http_server 1.2.4
• gnu gnutls 2.4.0
• gnu gnutls 1.3.5
• mozilla nss 3.7.3
• apache http_server 1.3.1.1
• gnu gnutls 1.2.4
• apache http_server 0.8.11
• gnu gnutls 1.2.8
• gnu gnutls 1.1.15
• gnu gnutls 2.0.2
• apache http_server 2.0.57
• apache http_server 2.0.58 win32
• apache http_server 1.3.28
• gnu gnutls 1.2.5
• apache http_server 2.1.3
• openssl openssl 0.9.8h
• apache http_server 2.1.1
• mozilla nss 3.7.2
• apache http_server 2.0.54
• gnu gnutls 1.3.2
• apache http_server 1.3.68
• openssl openssl 0.9.5
• mozilla nss 3.2
• gnu gnutls 1.0.24
• gnu gnutls 2.4.2
• apache http_server 2.0.40
• gnu gnutls 1.2.10
• apache http_server 1.3.5
• apache http_server 1.4.0
• openssl openssl 0.9.6d
• gnu gnutls 1.5.2
• gnu gnutls 2.1.1
• apache http_server 2.0.63
• openssl openssl 0.9.7i
• apache http_server 1.0.5
• apache http_server 1.3.33
• gnu gnutls 2.1.4
• apache http_server 2.0.49
• apache http_server 1.3.15
• gnu gnutls 1.7.15
• apache http_server 1.1.1
• mozilla nss 3.10
• openssl openssl 0.9.6g
• gnu gnutls 1.1.21
• openssl openssl 0.9.7c
• apache http_server 2.0.60
• apache http_server 1.3.0
• gnu gnutls 1.6.0
• gnu gnutls 2.2.5
• gnu gnutls 2.2.0
• mozilla nss 3.6.1
• apache http_server 1.3.27
• gnu gnutls 2.3.3
• gnu gnutls 1.1.16
• openssl openssl 0.9.7
• openssl openssl 0.9.6k
• apache http_server 1.2.6
• gnu gnutls 1.7.6
• openssl openssl 0.9.7l
• gnu gnutls 1.4.5
• apache http_server 1.3.37
• apache http_server 1.3.7
• openssl openssl 0.9.7m
• gnu gnutls 2.1.5
• apache http_server 2.0.32
• apache http_server 0.8.14
• mozilla nss 3.12
• mozilla nss 3.2.1
• mozilla nss 3.7.5
• gnu gnutls 2.6.3
• gnu gnutls 1.7.3
• apache http_server 2.2.8
• openssl openssl 0.9.7
• mozilla nss 3.12.1
• apache http_server 1.3.30
• gnu gnutls 2.0.0
• gnu gnutls 1.7.9
• apache http_server 2.1.9
• mozilla nss 3.9
• apache http_server 2.0.39
• mozilla nss 3.3.2
• apache http_server 1.3.12
• microsoft iis 7.0
• apache http_server 1.3.26
• gnu gnutls 1.2.7
• mozilla nss 3.4.3
• gnu gnutls 2.6.1
• apache http_server 2.2.10
• apache http_server 2.0.38
• gnu gnutls 1.6.1
• apache http_server 1.3.14
• gnu gnutls 1.7.4
• apache http_server 1.99
• apache http_server 2.0.48
• openssl openssl 0.9.6e
• gnu gnutls 1.1.18
• apache http_server 2.0.56
• apache http_server 2.0.52
• gnu gnutls 2.2.2
• mozilla nss 3.7.1
• gnu gnutls 2.6.6
• gnu gnutls 2.3.7
• apache http_server 2.2.6
• apache http_server 2.0.44
• openssl openssl 0.9.8e
• openssl openssl 0.9.3
• gnu gnutls 1.0.20
• gnu gnutls 1.4.3
• gnu gnutls 1.7.17
• gnu gnutls 1.0.16
• apache http_server 2.1.7
• apache http_server 2.2.13
• apache http_server 1.3.31
• openssl openssl 0.9.4
• openssl openssl 0.9.8c
• gnu gnutls 1.0.22
• gnu gnutls 1.2.11
• openssl openssl 0.9.5
• apache http_server 2.2.4
• apache http_server 1.3.19
• mozilla nss 3.11.7
• apache http_server 2.0.28
• apache http_server 1.3.34
• apache http_server 1.3.24
• gnu gnutls 1.5.3
• apache http_server 2.0.55
• gnu gnutls 1.5.5
• gnu gnutls 2.1.0
• gnu gnutls 2.8.1
• gnu gnutls 1.7.8
• gnu gnutls 1.7.11
• gnu gnutls 1.7.13
• gnu gnutls 1.2.1
• openssl openssl 0.9.6a
• openssl openssl 0.9.7
• gnu gnutls 2.3.11
• gnu gnutls 1.0.17
• openssl openssl 0.9.5
• apache http_server 2.0.47
• apache http_server 2.0.28
• apache http_server 1.3.35
• apache http_server 2.2
• gnu gnutls 1.1.14
• gnu gnutls 2.3.0
• apache http_server 2.0.37
• gnu gnutls 1.7.0
• gnu gnutls 1.4.4
• gnu gnutls 1.2.0
• gnu gnutls 1.1.13
• gnu gnutls 1.3.0
• openssl openssl 1.0 openvms
• gnu gnutls 1.3.1
• gnu gnutls 1.4.2
• apache http_server 2.0.46
• apache http_server 2.0.61
• gnu gnutls 2.6.0
• gnu gnutls 1.0.18
• gnu gnutls 1.7.10
• gnu gnutls 2.3.6
• apache http_server 1.3.16
• gnu gnutls 1.7.5
• gnu gnutls 1.2.8.1a1
• openssl openssl 0.9.6
• gnu gnutls 1.5.1
• gnu gnutls 2.5.0
• mozilla nss 3.7.7
• openssl openssl 0.9.7k
• gnu gnutls 2.0.4
• openssl openssl 0.9.6h
• apache http_server 2.2.12
• openssl openssl 0.9.7
• gnu gnutls 2.8.0
• mozilla nss 3.3.1
• apache http_server 2.1.4
• apache http_server 2.0.58
• apache http_server 2.0.43
• gnu gnutls 1.3.4
• apache http_server 2.1.8
• mozilla nss 3.0
• apache http_server 2.1.2
• gnu gnutls 2.1.6
• openssl openssl 0.9.5a
• openssl openssl 0.9.6i
• apache http_server 2.2.5
• apache http_server 1.3.6
• apache http_server 1.3.17
• apache http_server 1.3.36
• apache http_server 2.2.2
• openssl openssl 0.9.7e
• mozilla nss 3.7
• apache http_server 1.3.3
• openssl openssl 0.9.7f
• mozilla nss 3.4.2
• gnu gnutls 1.7.16
• apache http_server 1.3.39
• openssl openssl 0.9.6a
• gnu gnutls 1.4.0
• gnu gnutls 1.2.3
• openssl openssl 0.9.7b
• gnu gnutls 1.1.19
• apache http_server 1.3.23
• mozilla nss 3.11.2
• openssl openssl 0.9.6
• mozilla nss 3.11.4
• apache http_server 2.0.41
• apache http_server 2.0.53
• gnu gnutls 2.2.4
• apache http_server 2.0.59
• gnu gnutls 1.1.23
• openssl openssl 0.9.6l
• gnu gnutls 2.3.10
• apache http_server 2.2.1
• apache http_server 2.2.0
• openssl openssl 0.9.5a
• openssl openssl 0.9.6b
• openssl openssl 0.9.6j
• gnu gnutls 1.6.3
• apache http_server 2.0
• apache http_server 2.0.34
• apache http_server 2.0.9
• mozilla nss 3.9.5
• apache http_server 1.2
• gnu gnutls 1.3.3
• apache http_server 2.0.51
• gnu gnutls 1.7.1
• openssl openssl 0.9.8
• gnu gnutls 2.3.1
• gnu gnutls 1.7.14
• apache http_server 1.3.32
• openssl openssl 0.9.8a
• apache http_server 1.3.20
• gnu gnutls 1.7.12
• mozilla nss 3.11.8
• apache http_server 2.1.6
• gnu gnutls 1.4.1
• openssl openssl 0.9.7j
• gnu gnutls 1.0.19
• apache http_server 1.3.25
• gnu gnutls 1.5.4
• gnu gnutls 1.6.2
• apache http_server 1.3.7 dev
• openssl openssl 0.9.8d
• openssl openssl 0.9.7