CVE

Id
11187  
CVE No.
CVE-2004-2761  
Status
Candidate  
Description
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.  
Phase
Assigned (20090105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78932 11187 CVE-2004-2761 BUGTRAQ:20081230 MD5 Considered Harmful Today: Creating a rogue CA certificate  View
78933 11187 CVE-2004-2761 URL:http://www.securityfocus.com/archive/1/archive/1/499685/100/0/threaded  View
78934 11187 CVE-2004-2761 MISC:http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/  View
78935 11187 CVE-2004-2761 MISC:http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx  View
78936 11187 CVE-2004-2761 MISC:http://www.doxpara.com/research/md5/md5_someday.pdf  View
78937 11187 CVE-2004-2761 MISC:http://www.microsoft.com/technet/security/advisory/961509.mspx  View
78938 11187 CVE-2004-2761 MISC:http://www.phreedom.org/research/rogue-ca/  View
78939 11187 CVE-2004-2761 MISC:http://www.win.tue.nl/hashclash/SoftIntCodeSign/  View
78940 11187 CVE-2004-2761 MISC:http://www.win.tue.nl/hashclash/rogue-ca/  View
78941 11187 CVE-2004-2761 MISC:https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php  View
78942 11187 CVE-2004-2761 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=648886  View
78943 11187 CVE-2004-2761 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935  View
78944 11187 CVE-2004-2761 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888  View
78945 11187 CVE-2004-2761 CISCO:20090115 MD5 Hashes May Allow for Certificate Spoofing  View
78946 11187 CVE-2004-2761 URL:http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html  View
78947 11187 CVE-2004-2761 FEDORA:FEDORA-2009-1276  View
78948 11187 CVE-2004-2761 URL:https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html  View
78949 11187 CVE-2004-2761 REDHAT:RHSA-2010:0837  View
78950 11187 CVE-2004-2761 URL:https://rhn.redhat.com/errata/RHSA-2010-0837.html  View
78951 11187 CVE-2004-2761 REDHAT:RHSA-2010:0838  View
78952 11187 CVE-2004-2761 URL:https://rhn.redhat.com/errata/RHSA-2010-0838.html  View
78953 11187 CVE-2004-2761 UBUNTU:USN-740-1  View
78954 11187 CVE-2004-2761 URL:http://www.ubuntu.com/usn/usn-740-1  View
78955 11187 CVE-2004-2761 CERT-VN:VU#836068  View
78956 11187 CVE-2004-2761 URL:http://www.kb.cert.org/vuls/id/836068  View
78957 11187 CVE-2004-2761 BID:33065  View
78958 11187 CVE-2004-2761 URL:http://www.securityfocus.com/bid/33065  View
78959 11187 CVE-2004-2761 SECTRACK:1024697  View
78960 11187 CVE-2004-2761 URL:http://securitytracker.com/id?1024697  View
78961 11187 CVE-2004-2761 SECUNIA:33826  View
78962 11187 CVE-2004-2761 URL:http://secunia.com/advisories/33826  View
78963 11187 CVE-2004-2761 SECUNIA:34281  View
78964 11187 CVE-2004-2761 URL:http://secunia.com/advisories/34281  View
78965 11187 CVE-2004-2761 SECUNIA:42181  View
78966 11187 CVE-2004-2761 URL:http://secunia.com/advisories/42181  View
78967 11187 CVE-2004-2761 SREASON:4866  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40435 JVNDB-2009-001441 IBM Tivoli Storage Manager (TSM) におけるサービス運用妨害 (DoS) の脆弱性 MVS 上で稼動する IBM Tivoli Storage Manager (TSM) サーバには、HTTP communication メソッドが有効になっている場合、サービス運用妨害 (DoS) となる脆弱性が存在します。 CVE-2004-2762 11187 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001441.html  View