SecuirtyMetrics failure One I have never seen - MiTM Plaintext Data Inject?

We get this failure with a high number TCP port, along with the following comments, in part:

------------------------
Description: SSL / TLS Renegotiation Handshakes MiTM Plaintext Data Injection

Synopsis: The remote service allows insecure renegotiation of TLS / SSL connections.Impact: The remote service encrypts traffic using TLS / SSL but allows a client toinsecurely renegotiate the connection after the initial handshake. An unauthenticated,remote attacker may be able to leverage this issue to inject an arbitrary amount ofplaintext into the beginning of the application protocol stream, which could facilitateman-in-the-middle attacks...

See also : http://www.ietf.org/mail- archive/web/tls/current/msg03948.htmlhttp://www.kb.cert.org/vuls/id/120541 http://www.g-sec.lu/practicaltls.pdfhttp://tools.ietf.org/html/rfc5746 Data Received: TLSv1 supports insecurerenegotiation. SSLv3 supports insecure renegotiation. Resolution: Contact the vendorfor specific patch information.
------------------------

Any ideas of how we could plug this one up?

Thanks for any assistance.