High

DATE	CVE	VULNERABILITY TITLE	RISK
2005-09-16	CVE-2005-2946	Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature. network low complexity openssl canonical CWE-327	7.5
2005-03-01	CVE-2004-1002	Integer Underflow (Wrap or Wraparound) vulnerability in multiple products Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location. network low complexity samba canonical CWE-191	7.5