CVE ID:	CVE-2014-8642
Description:	Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.
Test IDs:	1.3.6.1.4.1.25623.1.2.1.2015.08
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8642 BugTraq ID: 72042 http://www.securityfocus.com/bid/72042 https://security.gentoo.org/glsa/201504-01 http://www.securitytracker.com/id/1031533 http://secunia.com/advisories/62242 http://secunia.com/advisories/62250 http://secunia.com/advisories/62253 http://secunia.com/advisories/62316 http://secunia.com/advisories/62418 http://secunia.com/advisories/62446 http://secunia.com/advisories/62790 SuSE Security Announcement: openSUSE-SU-2015:0077 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:0192 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html XForce ISS Database: firefox-cve20148642-sec-bypass(99963) https://exchange.xforce.ibmcloud.com/vulnerabilities/99963