NVD

Id
73138  
Name
CVE-2004-2761  
Description
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-02-06  
Published
2009-01-05  
Modified Date
2017-02-01  
Seq
2004-2761  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376448 73138 CVE-2004-2761 http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/  View
376449 73138 CVE-2004-2761 http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx  View
376450 73138 CVE-2004-2761 4866  View
376451 73138 CVE-2004-2761 1024697  View
376452 73138 CVE-2004-2761 20090115 MD5 Hashes May Allow for Certificate Spoofing  View
376453 73138 CVE-2004-2761 http://www.doxpara.com/research/md5/md5_someday.pdf  View
376454 73138 CVE-2004-2761 VU#836068  View
376455 73138 CVE-2004-2761 http://www.microsoft.com/technet/security/advisory/961509.mspx  View
376456 73138 CVE-2004-2761 http://www.phreedom.org/research/rogue-ca/  View
376457 73138 CVE-2004-2761 20081230 MD5 Considered Harmful Today: Creating a rogue CA certificate  View
376458 73138 CVE-2004-2761 33065  View
376459 73138 CVE-2004-2761 USN-740-1  View
376460 73138 CVE-2004-2761 http://www.win.tue.nl/hashclash/rogue-ca/  View
376461 73138 CVE-2004-2761 http://www.win.tue.nl/hashclash/SoftIntCodeSign/  View
376462 73138 CVE-2004-2761 https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php  View
376463 73138 CVE-2004-2761 https://bugzilla.redhat.com/show_bug.cgi?id=648886  View
376464 73138 CVE-2004-2761 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935  View
376465 73138 CVE-2004-2761 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888  View
376466 73138 CVE-2004-2761 RHSA-2010:0837  View
376467 73138 CVE-2004-2761 RHSA-2010:0838  View
376468 73138 CVE-2004-2761 FEDORA-2009-1276  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39995 JVNDB-2009-001001 MD5 アルゴリズムへの攻撃を用いた X.509 証明書の偽造 MD5 アルゴリズムの衝突耐性の不備を利用した攻撃法により、X.509 証明書の偽造に成功したことが報告されました。 CVE-2004-2761 11186 CVE-2004-2761 73138 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001001.html 2009-01-07 2009-07-08 View