漏洞版本: PHP 5.3.27 PHP 5.4.17 PHP 5.5.1 漏洞描述: Bugtraq ID:61776 PHP是一种HTML内嵌式的脚本语言 PHP SSL模块不正确处理服务器SSL证书中"subjectAltNames"通用名中的空字节,允许攻击者利用漏洞进行中间人攻击,获取敏感信息 <* 参考 http://www.secunia.com/advisories/54480/ http://git.php.net/?p=php-src.git;a=commit…

Nginx如下版本:0.5.*, 0.6.*, 0.7 <= 0.7.65, 0.8 <= 0.8.37在使用PHP-FastCGI执行php的时候,URL里面在遇到%00空字节时与FastCGI处理不一致,导致可在非php文件中嵌入php代码,通过访问url+%00.php来执行其中的php代码.如:http://local/robots.txt%00.php会把robots.txt文件当作php来执行. 目前还有许多nginx的低版本服务器存在此漏洞,要养成禁止上传文件目录下执行php的好…

centos6.8编译安装python2.7之后,使用pip报错:pip cannot confirm SSL certificate: SSL module is not available 解决方法: 安装openssl-devel 后重新编译安装python ref: https://stackoverflow.com/questions/25981703/pip-install-fails-with-connection-error-ssl-certificate-verify-fail…

# 背景 安装pip后发现执行pip install pytest,提示下面错误 pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. # 解决方法 查询了资料,大概意思是,新版的pip默认要使用SSL,可以通过设置修改,但木有发现pip.conf文件在哪里,囧rz,后续再研究下 但找到另外一个解决方法 先安装openssl-dev,然后重…

pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available.Collecting requests Could not fetch URL https://pypi.python.org/simple/requests/: There was a problem confirming the ssl certificate: Can't conne…

在使用pip安装pymongo的过程中报错,提示如下: $ pip3 install pymongo pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. Collecting pymongo Could not fetch URL https://pypi.python.org/simple/pymongo/: There was a p…

如果在运行爬虫时报此错:requests.exceptions.SSLError: HTTPSConnectionPool(host='www.baidu.com', port=443): Max retries exceeded with url: / (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.",))并且在python命令行中引用import ssl…

pip install 时报错: pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. 解决办法: For Windows 10 if you want use pip in normal cmd, not only in Anaconda prompt. you need add 3 environment paths. like the…

window7系统: 今天刚安装的anaconda(开源的Python包管理器),把原来的python3和python2都给卸载了,结果运行爬虫程序的时候报错: Caused by SSLError("Can’t connect to HTTPS URL because the SSL module is not available) 原因是anaconda没有安装好,环境变量没有配置成功,需要添加三条环境变量: E:\anaconda; E:\anaconda\Scripts; E:\anac…

环境:CentOS release 6.8 (Final) # 直接编译python3.7在使用pip3安装依赖的时候报错: Can't connect to HTTPS URL because the SSL module is not available. 解决方法: .编译安装OpenSSL 1.0.2j版本并重新配置环境变量 下载OpenSSL源码包: wget http://www.openssl.org/source/openssl-1.0.2j.tar.gz 解压缩,编译安装: t…