CVE ID:	CVE-2013-1740
Description:	The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
Test IDs:	1.3.6.1.4.1.25623.1.0.841691   1.3.6.1.4.1.25623.1.1.13.2014.028.02   1.3.6.1.4.1.25623.1.1.10.2014.0024   1.3.6.1.4.1.25623.1.0.123238
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1740 BugTraq ID: 64944 http://www.securityfocus.com/bid/64944 Bugtraq: 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/534161/100/0/threaded http://seclists.org/fulldisclosure/2014/Dec/23 SuSE Security Announcement: openSUSE-SU-2014:0212 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00004.html SuSE Security Announcement: openSUSE-SU-2014:0213 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00005.html http://www.ubuntu.com/usn/USN-2088-1 XForce ISS Database: mozilla-nss-cve20131740-info-disc(90394) https://exchange.xforce.ibmcloud.com/vulnerabilities/90394