PT-2014-2487

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS versions prior to 3.15.4 Description The issue allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic when the TLS False Start...