CVE-2004-2761 The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the sign...
MediumCVSS 5.0
EPSS 10.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ietf md5 | All versions | No fix listed |
References
- blog.mozilla.com
- blogs.technet.com
- 33826 third-party-advisory
- 34281 third-party-advisory
- 42181 third-party-advisory
- 4866 third-party-advisory
- 1024697 vdb-entry
- 20090115 MD5 Hashes May Allow for Certificate Spoofing vendor-advisory
- www.doxpara.com
- VU#836068 third-party-advisory us-government-resource
- www.microsoft.com mitigation patch vendor-advisory
- www.phreedom.org
- 20081230 MD5 Considered Harmful Today: Creating a rogue CA certificate mailing-list
- 33065 vdb-entry
- USN-740-1 vendor-advisory
- www.win.tue.nl
- www.win.tue.nl
- blogs.verisign.com
- bugzilla.redhat.com issue-tracking
- h20566.www2.hpe.com
- h20566.www2.hpe.com
- ics-cert.us-cert.gov
- RHSA-2010:0837 vendor-advisory
- RHSA-2010:0838 vendor-advisory
- support.hpe.com
- FEDORA-2009-1276 vendor-advisory