CVE-2005-4900

CVE-2005-4900 identifies a critical weakness in the SHA-1 cryptographic hash function, specifically its lack of collision resistance, which can enable spoofing attacks, particularly when SHA-1 is used in protocols like TLS 1.2. While the description mentions Google Chrome, the vulnerability is inherent to SHA-1 itself and affects any product relying on it for security. The vulnerability is rated Medium severity (CVSS 5.9), indicating a network-based attack with high attack complexity, requiring no user interaction or privileges, and potentially leading to high confidentiality impact. Despite its age and the fundamental nature of the cryptographic flaw, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this specific CVE.