CVE

Id
16104  
CVE No.
CVE-2005-4900  
Status
Candidate  
Description
SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.  
Phase
Assigned (20161014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
126309 16104 CVE-2005-4900 MISC:http://ia.cr/2007/474  View
126310 16104 CVE-2005-4900 MISC:http://shattered.io/  View
126311 16104 CVE-2005-4900 MISC:http://www.cwi.nl/news/2017/cwi-and-google-announce-first-collision-industry-security-standard-sha-1  View
126312 16104 CVE-2005-4900 MISC:https://arstechnica.com/security/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/  View
126313 16104 CVE-2005-4900 MISC:https://security.googleblog.com/2015/12/an-update-on-sha-1-certificates-in.html  View
126314 16104 CVE-2005-4900 MISC:https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html  View
126315 16104 CVE-2005-4900 MISC:https://sites.google.com/site/itstheshappening  View
126316 16104 CVE-2005-4900 MISC:https://www.schneier.com/blog/archives/2005/02/sha1_broken.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57816 JVNDB-2006-000012 Microsoft 製品における不正な TNEF メッセージにより任意のコードを実行される脆弱性 Microsoft Outlook および Microsoft Exchange Server には、Transport Neutral Encapsulation (TNEF) 形式の電子メールメッセージのデコード処理において不備があり、不正な TNEF メッセージを Microsoft Outlook で開く、あるいはプレビュー表示する、または Microsoft Exchange Server Information Store サービスにメッセージを処理させた場合に、任意のコードを実行される脆弱性が存在します。 CVE-2006-0002 16104 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000012.html  View