CVE-2005-2946

2005-09-16T22:03:00
ID CVE-2005-2946
Type cve
Reporter cve@mitre.org
Modified 2009-01-07T05:00:00

Description

The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.