Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2005-2946
HistorySep 16, 2005 - 12:00 a.m.

CVE-2005-2946

2005-09-1600:00:00
ubuntu.com
ubuntu.com
10

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.3%

JSON

The default configuration on OpenSSL before 0.9.8 uses MD5 for creating
message digests instead of a more cryptographically strong algorithm, which
makes it easier for remote attackers to forge certificates with a valid
certificate authority signature.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchopenssl< 0.9.8a-7ubuntu0.3UNKNOWN
ubuntu6.10noarchopenssl< 0.9.8b-2ubuntu2UNKNOWN
ubuntu7.04noarchopenssl< 0.9.8b-2ubuntu2UNKNOWN

Related

cve 1
nessus 3
redhatcve 1
debiancve 1
openvas 1
cisco 1
f5 2
oraclelinux 3
cve
cve
CVE-2005-2946
2005-09-16 22:03:00
nessus
nessus
Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)
2006-01-15 00:00:00
OpenSSL < 0.9.8 Weak Default Configuration
2012-01-04 00:00:00
Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)
2005-10-19 00:00:00
redhatcve
redhatcve
CVE-2005-2946
2015-10-30 09:57:54
debiancve
debiancve
CVE-2005-2946
2005-09-16 22:03:00
openvas
openvas
OpenSSL < 0.9.8 Weak Message Digest Vulnerability
2020-11-06 00:00:00
cisco
cisco
OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities
2005-10-12 15:54:57
f5
f5
SOL17454 - OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
K17454 : OpenSSL vulnerabilities CVE-2005-2946, CVE-2008-0891, and CVE-2012-2131
2015-10-16 00:00:00
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.3%

JSON
Related for UB:CVE-2005-2946
cve1nessus3redhatcve1debiancve1openvas1cisco1f52oraclelinux3