CVE
- Id
- 61687
- CVE No.
- CVE-2013-1740
- Status
- Candidate
- Description
- The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic.
- Phase
- Assigned (20130213)
- Votes
- None (candidate not yet proposed)
- Comments