K14638 : TLS/SSL RC4 vulnerability CVE-2013-2566

Security Advisory Description

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext. (CVE-2013-2566)

Impact

Remote attackers may be able to conduct plaintext-recovery attacks using statistical analysis of ciphertext.