CVE ID:	CVE-2014-1959
Description:	lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates.
Test IDs:	1.3.6.1.4.1.25623.1.0.702866   1.3.6.1.4.1.25623.1.0.867518   1.3.6.1.4.1.25623.1.1.13.2014.050.01   1.3.6.1.4.1.25623.1.1.10.2014.0077   1.3.6.1.4.1.25623.1.0.867534   1.3.6.1.4.1.25623.1.0.867545   1.3.6.1.4.1.25623.1.0.841730
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1959 BugTraq ID: 65559 http://www.securityfocus.com/bid/65559 Debian Security Information: DSA-2866 (Google Search) http://www.debian.org/security/2014/dsa-2866 http://seclists.org/oss-sec/2014/q1/344 http://seclists.org/oss-sec/2014/q1/345 http://www.ubuntu.com/usn/USN-2121-1