It seems that both Heartbleed and this MITM vulnerability were introduced by Robin Seggelmann [1], which will surely drive a lot of speculations...

[1] http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-1...