CVE ID:	CVE-2013-6628
Description:	net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.
Test IDs:	1.3.6.1.4.1.25623.1.0.702799
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6628 Debian Security Information: DSA-2799 (Google Search) http://www.debian.org/security/2013/dsa-2799 https://secure-resumption.com/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19108 SuSE Security Announcement: openSUSE-SU-2013:1776 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00025.html SuSE Security Announcement: openSUSE-SU-2013:1777 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00026.html SuSE Security Announcement: openSUSE-SU-2013:1861 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html SuSE Security Announcement: openSUSE-SU-2014:0065 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html