CVE-2013-2566: Weak Encryption
A new attack was discovered against TLS that allows an attacker to recover a limited amount of plaintext from a TLS connection when RC4 encryption is used. The attacks arise from statistical flaws in the keystream generated by the RC4 algorithm which become apparent in TLS ciphertexts when the same plaintext is repeatedly encrypted at a fixed location across many TLS sessions.
Reference:
http://www.isg.rhul.ac.uk/tls/ http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html
Other sources
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2566?
CVE-2013-2566 is categorized as a medium severity vulnerability due to its potential to leak limited plaintext data from TLS connections using RC4 encryption.
How do I fix CVE-2013-2566?
To fix CVE-2013-2566, disable RC4 encryption in your TLS configuration and switch to a stronger cipher.
Which software is affected by CVE-2013-2566?
CVE-2013-2566 affects various software including GE firmware versions 7.4x to 8.0x and multiple versions of Oracle HTTP Server.
Can CVE-2013-2566 be exploited remotely?
Yes, CVE-2013-2566 can be exploited remotely if an attacker can intercept and manipulate the TLS traffic.
What encryption algorithm does CVE-2013-2566 target?
CVE-2013-2566 specifically targets the RC4 encryption algorithm used in TLS connections.