CVE:CVE-2013-2566
CNNVD:CNNVD-201303-335
TLS协议和SSL协议中使用的的RC4算法中存在加密问题漏洞，该漏洞源于使用大量的单字节偏差。通过在使用相同明文的大量会话中密文的统计分析，远程攻击者利用该漏洞进行明文恢复攻击。
solution:Upgrade oracle communications_application_session_controller to a higher version than 3.9.1,and avoid the version [3.0.0,3.9.1]; Upgrade oracle http_server to a higher version than 11.1.1.7.0,11.1.1.9.0,12.1.3.0.0,12.2.1.1.0,12.2.1.2.0,and avoid the version 11.1.1.7.0,11.1.1.9.0,12.1.3.0.0,12.2.1.1.0,12.2.1.2.0; Upgrade oracle integrated_lights_out_manager_firmware to a higher version than 3.2.11,4.0.4,and avoid the version [3.0.0,3.2.11],[4.0.0,4.0.4]; Upgrade fujitsu sparc_enterprise_m3000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m4000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m5000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m8000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m9000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu m10-1_firmware to a higher version than xcp2280,and avoid the version [xcp,xcp2280); Upgrade fujitsu m10-4_firmware to a higher version than xcp2280,and avoid the version [xcp,xcp2280); Upgrade fujitsu m10-4s_firmware to a higher version than xcp2280,and avoid the version [xcp,xcp2280); Upgrade canonical ubuntu_linux to a higher version than 12.04,12.10,13.04,13.10,and avoid the version 12.04,12.10,13.04,13.10; Upgrade mozilla firefox to a higher version than 25.0.1,and avoid the version (,25.0.1); Upgrade mozilla firefox_esr to a higher version than 17.0.11,24.1.1,and avoid the version (,17.0.11),[24.1.0,24.1.1); Upgrade mozilla seamonkey to a higher version than 2.22.1,and avoid the version (,2.22.1); Upgrade mozilla thunderbird to a higher version than 24.1.1,and avoid the version (,24.1.1); Upgrade mozilla thunderbird_esr to a higher version than 17.0.11,and avoid the version (,17.0.11)