PT-2009-1143 · Rsa Security · Md5

Tomas Hoger · Published 2009-01-05 · Updated 2026-05-28 · CVE-2004-2761

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MD5 (affected versions not specified)

Description The MD5 Message-Digest Algorithm lacks collision resistance, making it easier for attackers to conduct spoofing attacks. This issue has been demonstrated through attacks on the use of MD5 in the signature algorithm of an X.509 certificate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of a Broken Cryptographic Algorithm

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-310

CWE-327

CWE-347

CWE-328

Related Identifiers

CVE-2004-2761

GHSA-M5M3-46GJ-WCH8

RHSA-2010:0837

RHSA-2010:0838

Affected Products

Md5

References · 39

• 🔥 https://exploit-db.com/exploits/24807 · Exploit
• http://microsoft.com/technet/security/advisory/961509.mspx · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0837.html · Vendor Advisory
• http://cisco.com/en/US/products/products_security_response09186a0080a5d24a.html · Vendor Advisory
• http://ubuntu.com/usn/usn-740-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/cve-2004-2761 · Security Note
• https://nvd.nist.gov/vuln/detail/cve-2005-4900 · Security Note
• https://rhn.redhat.com/errata/RHSA-2010-0838.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39237 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-2761 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-February/msg00096.html · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m5m3-46gj-wch8 · Vendor Advisory
• https://github.com/sylabs/sif/security/advisories/GHSA-m5m3-46gj-wch8 · Note
• https://github.com/sylabs/sif/commit/07fb86029a12e3210f6131e065570124605daeaa · Note
• https://github.com/sylabs/sif/releases/tag/v2.8.1 · Note