Back to search
CVE-2004-2761
Published: Jan 5, 2009
Modified: May 28, 2026
PUBLISHED
Description
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
33065
vdb-entry
x_refsource_BID
RHSA-2010:0837
vendor-advisory
x_refsource_REDHAT
http://www.phreedom.org/research/rogue-ca/
x_refsource_MISC
VU#836068
third-party-advisory
x_refsource_CERT-VN
4866
third-party-advisory
x_refsource_SREASON
20090115 MD5 Hashes May Allow for Certificate Spoofing
vendor-advisory
x_refsource_CISCO
http://www.win.tue.nl/hashclash/SoftIntCodeSign/
x_refsource_MISC
33826
third-party-advisory
x_refsource_SECUNIA
34281
third-party-advisory
x_refsource_SECUNIA
http://www.microsoft.com/technet/security/advisory/961509.mspx
x_refsource_MISC
http://www.doxpara.com/research/md5/md5_someday.pdf
x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
x_refsource_MISC
RHSA-2010:0838
vendor-advisory
x_refsource_REDHAT
USN-740-1
vendor-advisory
x_refsource_UBUNTU
1024697
vdb-entry
x_refsource_SECTRACK
FEDORA-2009-1276
vendor-advisory
x_refsource_FEDORA
20081230 MD5 Considered Harmful Today: Creating a rogue CA certificate
mailing-list
x_refsource_BUGTRAQ
42181
third-party-advisory
x_refsource_SECUNIA
http://www.win.tue.nl/hashclash/rogue-ca/
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=648886
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now