CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

• oracle communications application session controller (>= 3.0.0 <= 3.9.1) • oracle http server 11.1.1.7.0 • oracle http server 11.1.1.9.0 • oracle http server 12.1.3.0.0 • oracle http server 12.2.1.1.0 • oracle http server 12.2.1.2.0 • oracle integrated lights out manager firmware (>= 3.0.0 <= 3.2.11) • oracle integrated lights out manager firmware (>= 4.0.0 <= 4.0.4) • fujitsu sparc enterprise m3000 firmware (>= xcp < xcp 1121) • fujitsu sparc enterprise m4000 firmware (>= xcp < xcp 1121) • fujitsu sparc enterprise m5000 firmware (>= xcp < xcp 1121) • fujitsu sparc enterprise m8000 firmware (>= xcp < xcp 1121) • fujitsu sparc enterprise m9000 firmware (>= xcp < xcp 1121) • fujitsu m10-1 firmware (>= xcp < xcp2280) • fujitsu m10-4 firmware (>= xcp < xcp2280) • fujitsu m10-4s firmware (>= xcp < xcp2280) • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.04 • canonical ubuntu linux 13.10 • mozilla firefox (< 17.0.11) • mozilla firefox (< 25.0.1) • mozilla firefox (>= 24.1.0 < 24.1.1) • mozilla seamonkey (< 2.22.1) • mozilla thunderbird (< 24.1.1) • mozilla thunderbird esr (< 17.0.11)