The MD5 algorithm is known not to be collision resistant. This update blacklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0838 advisory.

    Red Hat Certificate System is an enterprise software system designed to     manage enterprise public key infrastructure (PKI) deployments. Simple     Certificate Enrollment Protocol (SCEP) is a PKI communication protocol     used to automatically enroll certificates for network devices.

    The certificate authority allowed unauthenticated users to request the     one-time PIN in an SCEP request to be decrypted. An attacker able to sniff     an SCEP request from a network device could request the certificate     authority to decrypt the request, allowing them to obtain the one-time     PIN. With this update, the certificate authority only handles decryption     requests from authenticated registration authorities. (CVE-2010-3868)

    The certificate authority allowed the one-time PIN used in SCEP requests     to be re-used. An attacker possessing a valid SCEP enrollment one-time PIN     could use it to generate an unlimited number of certificates.
    (CVE-2010-3869)

    The certificate authority used the MD5 hash algorithm to sign all SCEP     protocol responses. As MD5 is not collision resistant, an attacker could     use this flaw to perform an MD5 chosen-prefix collision attack to generate     attack-chosen output signed using the certificate authority's key.
    (CVE-2004-2761)

    This update also adds the following enhancements:

    * New configuration options for the SCEP server can define the default and     allowed encryption and hash algorithms. These options allow disabling uses     of the weaker algorithms not required by network devices and prevent     possible downgrade attacks. These can be configured by adding the following     options to the certificate authority's CS.cfg configuration file:

       ca.scep.encryptionAlgorithm=DES3        ca.scep.allowedEncryptionAlgorithms=DES3        ca.scep.hashAlgorithm=SHA1        ca.scep.allowedHashAlgorithms=SHA1,SHA256,SHA512

    * With this update, the certificate authority's SCEP server is disabled by     default. The SCEP server can be enabled by adding the 'ca.scep.enable=true'     option to the certificate authority's CS.cfg configuration file.

    * A separate key pair can now be configured for use in SCEP communication.
    Previously, the main certificate authority's key pair was used for SCEP     communication too. A designated SCEP key pair can be referenced by adding     a new option, ca.scep.nickname=[scep certificate nickname], to the     certificate authority's CS.cfg configuration file.

    * The certificate authority now allows the size of nonces used in SCEP     requests to be restricted by adding a new option, ca.scep.nonceSizeLimit=     [number of bytes], to the certificate authority's CS.cfg configuration     file. The limit is set to 16 bytes in the default CS.cfg configuration     file.

    All users of Red Hat Certificate System 8 should upgrade to these updated     packages, which resolve these issues and add these enhancements.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This updates adds protection against rogue CA that was generated as a proof-of- concept of the MD5 collision attacks against X509 signatures: http://www.win.tue.nl/hashclash/rogue-ca/ , related to CVE-2004-2761.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm (e.g. MD2, MD4, MD5, or SHA1). These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the same digital signature, allowing an attacker to masquerade as the affected service.

Note that this plugin reports all SSL certificate chains signed with SHA-1 that expire after January 1, 2017 as vulnerable. This is in accordance with Google's gradual sunsetting of the SHA-1 cryptographic hash algorithm.

Note that certificates in the chain that are contained in the Nessus CA database (known_CA.inc) have been ignored.

リモート Redhat Enterprise Linux 5 ホストに、RHSA-2010:0838 アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - MD5: MD5 Message-Digest アルゴリズムに衝突に対する耐性がありません (CVE-2004-2761)

  - 証明書システム: 認証されていないユーザーが、SCEP ワンタイム PIN 復号化をリクエストする可能性があります (CVE-2010-3868)

  - 証明書システム: SCEP ワンタイム PIN の再利用 (CVE-2010-3869)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

リモートサービスは、暗号的に弱いハッシュアルゴリズム（MD2、MD4、MD5、SHA1 など）を使って署名された SSL 証明書チェーンを使用します。これらの署名アルゴリズムは、衝突攻撃に脆弱であることが知られています。攻撃者はこれを悪用して、同じデジタル署名の別の証明書を生成し、これによって攻撃者は、影響を受けるサービスになりすますことができます。

このプラグインは、2017年1月1日より後に期限切れとなる、SHA-1で署名したすべてのSSL証明書チェーンを脆弱性として報告します。これは、GoogleがSHA-1暗号ハッシュアルゴリズムを段階的に廃止していくことに従ったものです。

Nessus CA データベース（known_CA.inc）に含まれているチェーン内の証明書はすでに無視されていることに注意してください。

远程 Redhat Enterprise Linux 5 主机上安装的程序包受到 RHSA-2010:0838 公告中提及的多个漏洞影响。

  - MD5：MD5 消息摘要算法不抗冲突 (CVE-2004-2761)

  - 证书系统：未经身份验证的用户可请求 SCEP 一次性 PIN 解密 (CVE-2010-3868)

  - 证书系统：SCEP 一次性 PIN 重用 (CVE-2010-3869)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

遠端 Redhat Enterprise Linux 5 主機上安裝的套件受到 RHSA-2010:0838 公告中提及的多個弱點影響。

  - MD5：MD5 訊息摘要演算法不具抗衝突性 (CVE-2004-2761)

  - Certificate System：未經驗證的使用者可要求 SCEP 一次性 PIN 解密 (CVE-2010-3868)

  - Certificate System：SCEP 一次性 PIN 重複使用 (CVE-2010-3869)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端服務使用已利用經密碼編譯的弱式雜湊演算法 (如 MD2、MD4、MD5 或 SHA1) 簽署的 SSL 憑證鏈。已知這些簽章演算法容易受到衝突攻擊影響。攻擊者可加以惡意利用，產生具有相同數位簽章的其他憑證，藉此偽裝成受影響的服務。

請注意，此外掛程式會報告所有透過 SHA-1 簽署且在 2017 年 1 月 1 日之後到期的 SSL 憑證鏈為弱點。做法是依照 Google 的 SHA-1 密碼編譯雜湊演算法逐步淘汰。

請注意，包含在 Nessus CA 資料庫 (known_CA.inc)中的憑證鏈已遭略過。

远程服务使用通过密码弱哈希算法（例如 MD2、MD4、MD5 或 SHA1）签名的 SSL 证书链。已知这些签名算法容易遭受碰撞攻击。攻击者可利用此漏洞生成具有相同数字签名的其他证书，从而允许攻击者伪装成受影响的服务。

请注意，该插件将把 2017 年 1 月 1 日之后过期的所有 SHA-1 签名 SSL 证书链报告为漏洞。这符合 Google 逐渐汰换 SHA-1 加密哈希算法的做法。

请注意，已忽略 Nessus CA 数据库 (known_CA.inc) 包含的链中的证书。

The remote service uses an SSL certificate that has been signed using a cryptographically weak hashing algorithm - MD4.  These algorithms are known to be vulnerable to collision attacks.  In theory, a determined attacker may be able to leverage this weakness to generate another certificate with the same digital signature, which could allow him to masquerade as the affected service.

The remote service uses an SSL certificate that has been signed using a cryptographically weak hashing algorithm - MD5. This algorithm is known to be vulnerable to collision attacks. In theory, a determined attacker may be able to leverage this weakness to generate another certificate with the same digital signature, which could allow them to masquerade as the affected service.

The remote service uses an SSL certificate that has been signed using a cryptographically weak hashing algorithm - MD5.  These algorithms are known to be vulnerable to collision attacks.  In theory, a determined attacker may be able to leverage this weakness to generate another certificate with the same digital signature, which could allow him to masquerade as the affected service.

The remote service uses an SSL certificate that has been signed using a cryptographically weak hashing algorithm - MD2.  These algorithms are known to be vulnerable to collision attacks.  In theory, a determined attacker may be able to leverage this weakness to generate another certificate with the same digital signature, which could allow him to masquerade as the affected service.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
37463	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : nss, firefox vulnerability (USN-740-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	medium
193666	RHEL 5 : pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
35595	Fedora 9 : nss-3.12.2.0-2.fc9 (2009-1276)	Nessus	Fedora Local Security Checks	2009/2/5	2021/1/11	medium
35291	SSL Certificate Signed Using Weak Hashing Algorithm	Nessus	General	2009/1/5	2023/12/15	high
193666	RHEL 5 : pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
35291	弱いハッシュアルゴリズムを使用して署名した SSL 証明書	Nessus	General	2009/1/5	2023/12/15	high
193666	RHEL 5：pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
193666	RHEL 5：pki (RHSA-2010:0838)	Nessus	Red Hat Local Security Checks	2024/4/21	2024/6/3	critical
35291	使用弱式雜湊演算法簽署的 SSL 憑證	Nessus	General	2009/1/5	2023/12/15	high
35291	使用弱哈希算法签名的 SSL 证书	Nessus	General	2009/1/5	2023/12/15	high
4804	SSL Certificate Signed Using Weak Hashing Algorithm	Nessus Network Monitor	Generic	2009/1/6	2019/3/6	medium
7201	TLS Certificate Signed Using Weak Hashing Algorithm - MD5	Nessus Network Monitor	Generic	2016/5/21	2018/8/16	medium
4803	SSL Certificate Signed Using Weak Hashing Algorithm	Nessus Network Monitor	Generic	2009/1/6	2019/3/6	medium
4805	SSL Certificate Signed Using Weak Hashing Algorithm	Nessus Network Monitor	Generic	2009/1/6	2019/3/6	medium

検出

プラグインの検索

medium

critical

medium

high

critical

high

critical

critical

high

high

medium

medium

medium

medium