CVE-2004-2761

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context...

5.0 MediumPublic exploit

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.

Exploit likelihood

10.1%Down 2.4 points since Feb 4, 2022

What each source reports

CVE List 9.8

Record: CVE-2004-2761
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-328
Updated: 2026-11-02

EUVDEUVD-2004-2751 9.8

Record: EUVD-2004-2751
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-2q4p-93p8-q2j6 9.8

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context...

Record: GHSA-2q4p-93p8-q2j6
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-328
Updated: 2026-11-02

NVD 9.8

Record: CVE-2004-2761
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-310, CWE-328
Updated: 2026-11-02

Affected products

ietf md5

Affected packages

Affected packages
Package	Affected	Fixed
`rhpki-ca` Red Hat:certificate_system:7.3 From an advisory covering 3 CVEs	before 0:7.3.0-21.el4	0:7.3.0-21.el4
`rhpki-common` Red Hat:certificate_system:7.3 From an advisory covering 3 CVEs	before 0:7.3.0-41.el4	0:7.3.0-41.el4
`rhpki-util` Red Hat:certificate_system:7.3 From an advisory covering 3 CVEs	before 0:7.3.0-21.el4	0:7.3.0-21.el4
`pki-ca` Red Hat:certificate_system:8::el5 From an advisory covering 3 CVEs	before 0:8.0.7-1.el5pki	0:8.0.7-1.el5pki
`pki-common` Red Hat:certificate_system:8::el5 From an advisory covering 3 CVEs	before 0:8.0.6-2.el5pki	0:8.0.6-2.el5pki
`pki-common-javadoc` Red Hat:certificate_system:8::el5 From an advisory covering 3 CVEs	before 0:8.0.6-2.el5pki	0:8.0.6-2.el5pki
`pki-util` Red Hat:certificate_system:8::el5 From an advisory covering 3 CVEs	before 0:8.0.5-1.el5pki	0:8.0.5-1.el5pki
`pki-util-javadoc` Red Hat:certificate_system:8::el5 From an advisory covering 3 CVEs	before 0:8.0.5-1.el5pki	0:8.0.5-1.el5pki

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MD5 - Message Digest Algorithm Hash Collision	2004-12-07

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-2761 is a medium vulnerability (CVSS 5.0) in Ietf Md5, published January 5, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.1%, the 95th percentile. No source names a fixed version.

References

Show 37 moreShow less