| Package | Affected versions | Patched versions |
|---|---|---|
| openssl | < 0.9.8 | 0.9.8 |
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free