high7.5
CVE-2005-2946
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it ea…
Impact
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openssl | Openssl | before 0.9.8 |
| Canonical | Ubuntu Linux | Versions 4.10, 5.04 |