CVE-2005-2946

CVE-2005-2946 describes a weakness in OpenSSL versions prior to 0.9.8, where the default configuration utilized MD5 for message digests instead of a cryptographically stronger algorithm. This vulnerability, affecting products like canonical openssl and ubuntu_linux, allows remote attackers to more easily forge certificates with a valid certificate authority signature. With a CVSS score of 7.5 (HIGH), it represents a significant integrity risk (I:H) that can be exploited over a network (AV:N) with low attack complexity (AC:L). Despite its severity, there is no evidence of active exploitation, no known exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.