CVE-2013-2566 - 漏洞详情

CVE-2013-2566 (CNNVD-201303-335)

MEDIUM

中文标题:

TLS/SSL协议 RC4算法加密问题漏洞

英文标题:

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which ...

CVSS分数: 5.9

发布时间: 2013-03-14 22:00:00

漏洞类型: 加密问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

TLS协议和SSL协议中使用的的RC4算法中存在加密问题漏洞，该漏洞源于使用大量的单字节偏差。通过在使用相同明文的大量会话中密文的统计分析，远程攻击者利用该漏洞进行明文恢复攻击。

英文描述:

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

CWE类型:

CWE-326

受影响产品

厂商	产品	版本	版本范围	平台	CPE
oracle	communications_application_session_controller	*	-	-	`cpe:2.3:a:oracle:communications_application_session_controller::::::::`
oracle	http_server	11.1.1.7.0	-	-	`cpe:2.3:a:oracle:http_server:11.1.1.7.0:::::::*`
oracle	http_server	11.1.1.9.0	-	-	`cpe:2.3:a:oracle:http_server:11.1.1.9.0:::::::*`
oracle	http_server	12.1.3.0.0	-	-	`cpe:2.3:a:oracle:http_server:12.1.3.0.0:::::::*`
oracle	http_server	12.2.1.1.0	-	-	`cpe:2.3:a:oracle:http_server:12.2.1.1.0:::::::*`
oracle	http_server	12.2.1.2.0	-	-	`cpe:2.3:a:oracle:http_server:12.2.1.2.0:::::::*`
oracle	integrated_lights_out_manager_firmware	*	-	-	`cpe:2.3:o:oracle:integrated_lights_out_manager_firmware::::::::`
fujitsu	sparc_enterprise_m3000_firmware	*	-	-	`cpe:2.3:o:fujitsu:sparc_enterprise_m3000_firmware::::::::`
fujitsu	sparc_enterprise_m4000_firmware	*	-	-	`cpe:2.3:o:fujitsu:sparc_enterprise_m4000_firmware::::::::`
fujitsu	sparc_enterprise_m5000_firmware	*	-	-	`cpe:2.3:o:fujitsu:sparc_enterprise_m5000_firmware::::::::`
fujitsu	sparc_enterprise_m8000_firmware	*	-	-	`cpe:2.3:o:fujitsu:sparc_enterprise_m8000_firmware::::::::`
fujitsu	sparc_enterprise_m9000_firmware	*	-	-	`cpe:2.3:o:fujitsu:sparc_enterprise_m9000_firmware::::::::`
fujitsu	m10-1_firmware	*	-	-	`cpe:2.3:o:fujitsu:m10-1_firmware::::::::`
fujitsu	m10-4_firmware	*	-	-	`cpe:2.3:o:fujitsu:m10-4_firmware::::::::`
fujitsu	m10-4s_firmware	*	-	-	`cpe:2.3:o:fujitsu:m10-4s_firmware::::::::`
canonical	ubuntu_linux	12.04	-	-	`cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm:::`
canonical	ubuntu_linux	12.10	-	-	`cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*`
canonical	ubuntu_linux	13.04	-	-	`cpe:2.3:o:canonical:ubuntu_linux:13.04:::::::*`
canonical	ubuntu_linux	13.10	-	-	`cpe:2.3:o:canonical:ubuntu_linux:13.10:::::::*`
mozilla	firefox	*	-	-	`cpe:2.3:a:mozilla:firefox::::::::`
mozilla	seamonkey	*	-	-	`cpe:2.3:a:mozilla:seamonkey::::::::`
mozilla	thunderbird	*	-	-	`cpe:2.3:a:mozilla:thunderbird::::::::`
mozilla	thunderbird_esr	*	-	-	`cpe:2.3:a:mozilla:thunderbird_esr::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）