CVE:CVE-2015-2808
CNNVD:CNNVD-201503-654
RC4是美国软件开发者罗纳德-李维斯特（Ron Rivest）所研发的一套密钥长度可变的流加密算法。该算法由伪随机数生成器和异或运算组成，且支持加解密使用相同的密钥。
TLS协议和SSL协议中使用的RC4算法中存在安全漏洞，该漏洞源于程序在初始化阶段没有正确组合状态数据和密钥数据。远程攻击者可通过嗅探特定的网络流量，然后实施暴力破解攻击利用该漏洞对数据流中的初始化字节实施plaintext-recovery攻击。
solution:Upgrade oracle communications_application_session_controller to a higher version than 3.9.0,and avoid the version [3.0.0,3.9.0]; Upgrade oracle communications_policy_management to a higher version than 9.9.2,and avoid the version (,9.9.2); Upgrade oracle http_server to a higher version than 11.1.1.7.0,11.1.1.9.0,12.1.3.0.0,12.2.1.1.0,12.2.1.2.0,and avoid the version 11.1.1.7.0,11.1.1.9.0,12.1.3.0.0,12.2.1.1.0,12.2.1.2.0; Upgrade oracle integrated_lights_out_manager_firmware to a higher version than 3.2.11,4.0.4,and avoid the version [3.0.0,3.2.11],[4.0.0,4.0.4]; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat satellite to a higher version than 5.7,5.6,and avoid the version 5.7,5.6; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.6,7.1,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.6,7.1,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,7.3,7.4,7.6,7.7,and avoid the version 6.6,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,6.0,7.0,and avoid the version 5.0,6.0,7.0; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp3,11:sp4,and avoid the version 11:sp3,11:sp4; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,11:sp4,12,and avoid the version 11:sp3,11:sp4,12; Upgrade suse linux_enterprise_server to a higher version than 10:sp4,11:sp1,11:sp2,11:sp3,12,and avoid the version 10:sp4,11:sp1,11:sp2,11:sp3,12; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp3,12,and avoid the version 11:sp3,12; Upgrade suse manager to a higher version than 1.7,and avoid the version 1.7; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,and avoid the version 12.04,14.04,15.04; Upgrade fujitsu sparc_enterprise_m3000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m4000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m5000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m8000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade fujitsu sparc_enterprise_m9000_firmware to a higher version than xcp_1121,and avoid the version [xcp,xcp_1121); Upgrade huawei e6000_firmware to a higher version than -; Upgrade huawei e9000_firmware to a higher version than -; Upgrade huawei oceanstor_18500_firmware to a higher version than -; Upgrade huawei oceanstor_18800_firmware to a higher version than -; Upgrade huawei oceanstor_18800f_firmware to a higher version than -; Upgrade huawei oceanstor_9000_firmware to a higher version than -; Upgrade huawei oceanstor_cse_firmware to a higher version than -; Upgrade huawei oceanstor_hvs85t_firmware to a higher version than -; Upgrade huawei oceanstor_s2600t_firmware to a higher version than -; Upgrade huawei oceanstor_s5500t_firmware to a higher version than -; Upgrade huawei oceanstor_s5600t_firmware to a higher version than -; Upgrade huawei oceanstor_s5800t_firmware to a higher version than -; Upgrade huawei oceanstor_s6800t_firmware to a higher version than -; Upgrade huawei oceanstor_vis6600t_firmware to a higher version than -; Upgrade huawei quidway_s9300_firmware to a higher version than -; Upgrade huawei s7700_firmware to a higher version than -; Upgrade huawei 9700_firmware to a higher version than -; Upgrade huawei s12700_firmware to a higher version than -; Upgrade huawei s2700_firmware to a higher version than -; Upgrade huawei s3700_firmware to a higher version than -; Upgrade huawei s5700ei_firmware to a higher version than -; Upgrade huawei s5700hi_firmware to a higher version than -; Upgrade huawei s5700si_firmware to a higher version than -; Upgrade huawei s5710ei_firmware to a higher version than -; Upgrade huawei s5710hi_firmware to a higher version than -; Upgrade huawei s6700_firmware to a higher version than -; Upgrade huawei s2750_firmware to a higher version than -; Upgrade huawei s5700li_firmware to a higher version than -; Upgrade huawei s5700s-li_firmware to a higher version than -; Upgrade huawei s5720hi_firmware to a higher version than -; Upgrade huawei s5720ei_firmware to a higher version than -; Upgrade huawei te60_firmware to a higher version than -; Upgrade huawei oceanstor_replicationdirector to a higher version than v100r003c00,and avoid the version v100r003c00; Upgrade huawei policy_center to a higher version than v100r003c00,v100r003c10,and avoid the version v100r003c00,v100r003c10; Upgrade huawei smc2.0 to a higher version than v100r002c01,v100r002c02,v100r002c03,v100r002c04,and avoid the version v100r002c01,v100r002c02,v100r002c03,v100r002c04; Upgrade huawei ultravr to a higher version than v100r003c00,and avoid the version v100r003c00; Upgrade ibm cognos_metrics_manager to a higher version than 10.1,10.1.1,10.2,10.2.1,10.2.2,and avoid the version 10.1,10.1.1,10.2,10.2.1,10.2.2