Forgot your password?
New user?
Rogue MD5 SSL Certificate Vulnerability
Last Updated on:
Apr 06, 2010 07:11 PM
US-CERT is aware of a public report describing how MD5 collisions can be leveraged to generate rogue SSL CA certificates. A rogue CA certificate could be used by an attacker to generate valid SSL certificates for arbitrary web sites. Using these certificates in DNS redirection attacks, an attacker could spoof an SSL protected web site and obtain sensitive information.
US-CERT will provide additional information as it becomes available.
The detailed entry of tha above is available at US-CERT
No rating set
Document Actions
Share
|
