CVE-2013-2566 in Oracle Communications BRM

Summary

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

Reservation

03/14/2013

Disclosure

03/15/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
111961	Oracle Communications BRM Application Session Controller cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
100039	Oracle Communications Session Border Controller Sysadmin cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
92877	Oracle Enterprise Session Border Controller OpenSSH cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
90105	Oracle Fujitsu M Server cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
82669	Oracle SPARC Enterprise Server XCP Firmware cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
68477	IBM Security AppScan Enterprise RC4 Encryption cryptographic issue	310	Not defined	Official fix	CVE-2013-2566
7953	Ron Rivest RC4 Algorithm Pseudo-Random Character Generation cryptographic issue	310	Proof-of-Concept	Official fix	CVE-2013-2566