CVE-2013-2566
No fix known EPSS 84%CVSS 5.9
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
Products: oracle communications_application_session_controller, oracle http_server, oracle integrated_lights_out_manager_firmware, fujitsu sparc_enterprise_m3000_firmware, fujitsu sparc_enterprise_m4000_firmware, fujitsu sparc_enterprise_m5000_firmware, fujitsu sparc_enterprise_m8000_firmware, fujitsu sparc_enterprise_m9000_firmware, fujitsu m10-1_firmware, fujitsu m10-4_firmware, fujitsu m10-4s_firmware, canonical ubuntu_linux, mozilla firefox, mozilla seamonkey, mozilla thunderbird, mozilla thunderbird_esr