Via a database of 35 million hashes, as it says lower down. They will need 2^128 entries in the database, and this is a rather large number.
The RFC says ' It is conjectured that the difficulty of coming up with two messages having the same message digest is on the order of 2^64 operations, and that the difficulty of coming up with any message having a given message digest is on the order of 2^128 operations.'
> The RFC says ' It is conjectured that the difficulty
> of coming up with two messages having the same
> message digest is on the order of 2^64 operations,
> and that the difficulty of coming up with any message
> having a given message digest is on the order of
> 2^128 operations.'
http://www.schneier.com/blog/archives/2005/06/more_md5_collis.html