{"schemaVersion":3,"id":"CVE-2004-2761","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.","dates":{"published":"2009-01-05T20:00:00.000Z","modified":"2026-05-28T18:20:09.605Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.09934,"percentile":0.9555,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.09934},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.09934,"percentile":0.9555}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.09934,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.09934,"percentile":0.9555}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"24807","name":"MD5 - Message Digest Algorithm Hash Collision","source":"exploit-database","url":"https://www.exploit-db.com/exploits/24807","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":"dos","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"dos","platform":"multiple","file":"exploits/multiple/dos/24807.txt","codes":["CVE-2004-2761","OSVDB-45127"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"},{"id":"CWE-328","name":"Use of Weak Hash","description":"The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/328.html"}],"affected":[{"vendor":"ietf","product":"md5","name":"md5","label":"md5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/ietf/md5"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/33065","label":"www.securityfocus.com/bid/33065","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0837.html","label":"rhn.redhat.com/errata/RHSA-2010-0837.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.phreedom.org/research/rogue-ca/","label":"www.phreedom.org/research/rogue-ca/","hostname":"www.phreedom.org","tags":["X Refsource MISC"]},{"url":"http://www.kb.cert.org/vuls/id/836068","label":"www.kb.cert.org/vuls/id/836068","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://securityreason.com/securityalert/4866","label":"securityreason.com/securityalert/4866","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/","label":"blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/","hostname":"blog.mozilla.com","tags":["X Refsource MISC"]},{"url":"http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html","label":"www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.html","hostname":"www.cisco.com","tags":["Vendor Advisory","X Refsource CISCO"]},{"url":"http://www.win.tue.nl/hashclash/SoftIntCodeSign/","label":"www.win.tue.nl/hashclash/SoftIntCodeSign/","hostname":"www.win.tue.nl","tags":["X Refsource MISC"]},{"url":"http://secunia.com/advisories/33826","label":"secunia.com/advisories/33826","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/34281","label":"secunia.com/advisories/34281","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.microsoft.com/technet/security/advisory/961509.mspx","label":"www.microsoft.com/technet/security/advisory/961509.mspx","hostname":"www.microsoft.com","tags":["X Refsource MISC","Mitigation","Patch","Vendor Advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us","label":"support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_us","hostname":"support.hpe.com","tags":["X Refsource CONFIRM"]},{"url":"http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx","label":"blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspx","hostname":"blogs.technet.com","tags":["X Refsource MISC"]},{"url":"http://www.doxpara.com/research/md5/md5_someday.pdf","label":"www.doxpara.com/research/md5/md5_someday.pdf","hostname":"www.doxpara.com","tags":["X Refsource MISC"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","label":"ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0838.html","label":"rhn.redhat.com/errata/RHSA-2010-0838.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php","label":"blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.php","hostname":"blogs.verisign.com","tags":["X Refsource MISC"]},{"url":"http://www.ubuntu.com/usn/usn-740-1","label":"www.ubuntu.com/usn/usn-740-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://securitytracker.com/id?1024697","label":"securitytracker.com/id?1024697","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html","label":"www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/499685/100/0/threaded","label":"www.securityfocus.com/archive/1/499685/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","label":"h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935","hostname":"h20566.www2.hpe.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/42181","label":"secunia.com/advisories/42181","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.win.tue.nl/hashclash/rogue-ca/","label":"www.win.tue.nl/hashclash/rogue-ca/","hostname":"www.win.tue.nl","tags":["X Refsource MISC"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648886","label":"bugzilla.redhat.com/show_bug.cgi?id=648886","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking"]}],"lineage":{"upstream":[],"downstream":["RHSA-2010:0837","RHSA-2010:0838"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2009-01-05T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-28T18:20:09.605Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:12:55.707Z","stale":false,"partial":false}}