CVE-2004-2761

Critical

Published: 05/01/2009(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The MD5 Message-Digest Algorithm is not collision resistant, making it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.

Risk Assessment

The use of MD5 in critical security components, such as X.509 certificates, can lead to identity spoofing, threatening the integrity of systems and data within the organization.

Recommendation

It is recommended to avoid using the MD5 algorithm in new implementations and to migrate to more secure algorithms such as SHA-256.

Original NVD description (English source)

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.