Description (CNA)
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.ubuntu.com/show_bug.cgi?id=13593
- http://www.ubuntu.com/usn/usn-179-1
- http://www.cits.rub.de/MD5Collisions/
ADP enrichment
No English description supplied.