Fake valid SSL certificate creation attack was successfully demonstrated

2008-12-31T00:00:00
ID SECURITYVULNS:VULN:9553
Type securityvulns
Reporter PHREEDOM
Modified 2008-12-31T00:00:00

Description

Valid fake SSL certificate creation attack was demonstratedby exploiting MD5 collisions and RapidSSL certificate generation procedures. The cost of attack is appoximately $2000.