CVE-2004-2761 Weak cryptography in n/a
The MD5 algorithm is vulnerable to collision attacks, allowing attackers to spoof X.509 certificates and bypass security checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-2761?
CVE-2004-2761 is a critical vulnerability in n/a, published on 5 Jan 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.
Which versions are affected by CVE-2004-2761?
It affects 1 product.
Products include Ietf Md5.
How do I fix CVE-2004-2761?
No fix published yet.
Is CVE-2004-2761 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-2761 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-2q4p-93p8-q2j6.