CVE-2013-2566

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.

• CWE-326
• CWE-327

• http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.htmlThird Party Advisory
• http://cr.yp.to/talks/2013.03.12/slides.pdfThird Party Advisory
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
• http://marc.info/?l=bugtraq&m=143039468003789&w=2Issue Tracking, Third Party Advisory
• http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201406-19.xmlThird Party Advisory
• http://www.isg.rhul.ac.uk/tls/Third Party Advisory
• http://www.mozilla.org/security/announce/2013/mfsa2013-103.htmlThird Party Advisory
• http://www.opera.com/docs/changelogs/unified/1215/Third Party Advisory
• http://www.opera.com/security/advisory/1046Third Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory
• http://www.securityfocus.com/bid/58796Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2031-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2032-1Third Party Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935Third Party Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888Third Party Advisory
• https://security.gentoo.org/glsa/201504-01Third Party Advisory
• http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.htmlThird Party Advisory
• http://cr.yp.to/talks/2013.03.12/slides.pdfThird Party Advisory
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
• http://marc.info/?l=bugtraq&m=143039468003789&w=2Issue Tracking, Third Party Advisory
• http://my.opera.com/securitygroup/blog/2013/03/20/on-the-precariousness-of-rc4Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201406-19.xmlThird Party Advisory
• http://www.isg.rhul.ac.uk/tls/Third Party Advisory
• http://www.mozilla.org/security/announce/2013/mfsa2013-103.htmlThird Party Advisory
• http://www.opera.com/docs/changelogs/unified/1215/Third Party Advisory
• http://www.opera.com/security/advisory/1046Third Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlThird Party Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlThird Party Advisory
• http://www.securityfocus.com/bid/58796Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-2031-1Third Party Advisory
• http://www.ubuntu.com/usn/USN-2032-1Third Party Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05289935Third Party Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05336888Third Party Advisory
• https://security.gentoo.org/glsa/201504-01Third Party Advisory

Published

Mar 15, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2560Directory traversal vulnerability in the web interface on Fo…
• CVE-2013-2561OpenFabrics ibutils 1.5.7 allows local users to overwrite ar…
• CVE-2013-2562Mambo CMS 4.6.5 stores the MySQL database password in cleart…
• CVE-2013-2563Mambo CMS 4.6.5 uses world-readable permissions on configura…
• CVE-2013-2564Mambo CMS 4.6.5 allows remote attackers to cause a denial of…
• CVE-2013-2565A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs…
• CVE-2013-2567An Authentication Bypass vulnerability exists in the web int…7.5
• CVE-2013-2568A Command Injection vulnerability exists in Zavio IP Cameras…9.8
• CVE-2013-2569A Security Bypass vulnerability exists in Zavio IP Cameras t…7.5
• CVE-2013-2570A Command Injection vulnerability exists in Zavio IP Cameras…9.8
• CVE-2013-2571Iris 3.8 before build 1548, as used in Xpient point of sale …9.8
• CVE-2013-2572A Security Bypass vulnerability exists in TP-LINK IP Cameras…7.5