NetSight
IP …
medium5.9

CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-r…

Impact

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

Affected products

VendorProductAffected versions
OracleCommunications Application Session Controller
from 3.0.0 through 3.9.1
OracleHttp Server
Versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
OracleIntegrated Lights Out Manager Firmware
from 3.0.0 through 3.2.11
from 4.0.0 through 4.0.4
FujitsuSparc Enterprise M3000 Firmware
from xcp before xcp_1121
FujitsuSparc Enterprise M4000 Firmware
from xcp before xcp_1121
FujitsuSparc Enterprise M5000 Firmware
from xcp before xcp_1121
FujitsuSparc Enterprise M8000 Firmware
from xcp before xcp_1121
FujitsuSparc Enterprise M9000 Firmware
from xcp before xcp_1121
FujitsuM10-1 Firmware
from xcp before xcp2280
FujitsuM10-4 Firmware
from xcp before xcp2280
FujitsuM10-4s Firmware
from xcp before xcp2280
CanonicalUbuntu Linux
Versions 12.04, 12.10, 13.04, 13.10

Weakness classification

CWE-326CWE-327

References