CVE ID:	CVE-2014-9365
Description:	The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before 3.4.3, when accessing an HTTPS URL, do not (a) check the certificate against a trust store or verify that the server hostname matches a domain name in the subject's (b) Common Name or (c) subjectAltName field of the X.509 certificate, which allows man-in- the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2017.1186   1.3.6.1.4.1.25623.1.1.2.2017.1185   1.3.6.1.4.1.25623.1.1.10.2015.0091   1.3.6.1.4.1.25623.1.0.118257   1.3.6.1.4.1.25623.1.0.871871
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9365 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 71639 http://www.securityfocus.com/bid/71639 https://security.gentoo.org/glsa/201503-10 http://www.openwall.com/lists/oss-security/2014/12/11/1 RedHat Security Advisories: RHSA-2016:1166 https://access.redhat.com/errata/RHSA-2016:1166 RedHat Security Advisories: RHSA-2017:1162 https://access.redhat.com/errata/RHSA-2017:1162 RedHat Security Advisories: RHSA-2017:1868 https://access.redhat.com/errata/RHSA-2017:1868