CVE-2004-2761

EPSS 6.23% · P91 Updated Feb 27, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2004-2761

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Ietf X.509证书MD5签名冲突漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

X.509是由国际电信联盟(ITU-T)制定的数字证书标准。 MD5哈希算法中可能存在冲突，导致用这种算法所签名的X.509数字证书并不安全。攻击者可以生成内容不同但数字签名与源证书相同的额外数字证书，如果WEB浏览器信任了伪造的证书的话，攻击者就可以扮演称为可信任的站点，包括用HTTPS协议加密的电子商务站点。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2004-2761

#	POC Description	Source Link	Shenlong Link
1	Windows下SSL证书制作工具-CVE-2004-2761漏洞修复	https://github.com/chaos198800/Windows-xia-SSL-zheng-shu-zhi-zuo-gong-ju--CVE-2004-2761-lou-dong-xiu-fu	POC Details

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2004-2761

请登录查看更多情报信息。

https://bugzilla.redhat.com/show_bug.cgi?id=648886x_refsource_CONFIRM
https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabilities_and_mit.phpx_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02x_refsource_MISC
http://www.win.tue.nl/hashclash/rogue-ca/x_refsource_MISC
http://www.phreedom.org/research/rogue-ca/x_refsource_MISC
http://blog.mozilla.com/security/2008/12/30/md5-weaknesses-could-lead-to-certificate-forgery/x_refsource_MISC
http://www.doxpara.com/research/md5/md5_someday.pdfx_refsource_MISC
http://www.microsoft.com/technet/security/advisory/961509.mspxx_refsource_MISC
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888x_refsource_CONFIRM
http://blogs.technet.com/swi/archive/2008/12/30/information-regarding-md5-collisions-problem.aspxx_refsource_MISC
http://www.win.tue.nl/hashclash/SoftIntCodeSign/x_refsource_MISC
https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03814en_usx_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935x_refsource_CONFIRM
http://securityreason.com/securityalert/4866third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/33826third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/34281third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/33065vdb-entryx_refsource_BID
http://secunia.com/advisories/42181third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1024697vdb-entryx_refsource_SECTRACK
http://www.kb.cert.org/vuls/id/836068third-party-advisoryx_refsource_CERT-VN
http://www.ubuntu.com/usn/usn-740-1vendor-advisoryx_refsource_UBUNTU
https://rhn.redhat.com/errata/RHSA-2010-0838.htmlvendor-advisoryx_refsource_REDHAT
https://rhn.redhat.com/errata/RHSA-2010-0837.htmlvendor-advisoryx_refsource_REDHAT
https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00096.htmlvendor-advisoryx_refsource_FEDORA
http://www.cisco.com/en/US/products/products_security_response09186a0080a5d24a.htmlvendor-advisoryx_refsource_CISCO
http://www.securityfocus.com/archive/1/499685/100/0/threadedmailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2004-2761

Same Patch Batch · n/a · 2009-01-05 · 12 CVEs total

CVE-2008-5842		Fujitsu-Siemens WebTransactions 多个跨站脚本攻击漏洞
CVE-2008-5843		PDFjam 多个不安全临时文件创建漏洞
CVE-2008-5844		PHP 'magic_quotes_gpc'SQL注入漏洞
CVE-2008-5845		Sixapart Movable Type跨站脚本攻击漏洞
CVE-2008-5846		Sixapart Movable Type 'publish post'安全绕过漏洞
CVE-2008-5847		constructr constructr-cms 信任管理漏洞
CVE-2009-0022		Samba 输入验证漏洞
CVE-2008-5838		E-Php Shopping Cart Script ‘search_results.php’ SQL注入漏洞
CVE-2008-5839		Foxmail邮件客户端mailto缓冲区溢出漏洞
CVE-2008-5840		PHP iCalendar Cookie身份认证绕过漏洞
CVE-2008-5841		iGaming CMS多个SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2004-2761

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2004-2761

I. Basic Information for CVE-2004-2761

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2004-2761

III. Intelligence Information for CVE-2004-2761

Same Patch Batch · n/a · 2009-01-05 · 12 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2004-2761

Leave a comment