VDB
CVE-2004-2761
CVE-2004-2761
PUBLISHED
CVSS 5 MEDIUM
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
EPSS 9.93% · 95.1th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
9.93%
95.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| ietf | md5 |
Timeline
- Dec 7, 2004 PoC Published
- Dec 30, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
References
- https://www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=648886 issue
- http://www.phreedom.org/research/rogue-ca/ url
- 4866 third-party-advisory
- 33826 third-party-advisory
- http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx url
- http://www.doxpara.com/research/md5/md5_someday.pdf url
- FEDORA-2009-1276 vendor-advisory
- http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/ url
- 20090115 MD5 Hashes May Allow for Certificate Spoofing vendor-advisory
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 url
- USN-740-1 vendor-advisory
- 20081230 MD5 Considered Harmful Today: Creating a rogue CA certificate mailing-list
- 42181 third-party-advisory
- http://www.win.tue.nl/hashclash/rogue-ca/ url
- https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php technical
- http://secunia.com/advisories/34281 technical
- http://www.securityfocus.com/bid/33065 technical
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us technical
- http://securitytracker.com/id?1024697 technical
…and 12 more