POLICY-OTHER --
POLICY-OTHER SSL/TLS weak RC4 cipher suite use attempt
This event is generated when a weak SSL/TLS RC4 cipher suite is detected. Impact: Potential Corporate Privacy Violation Details: Ease of Attack:
This rule alerts when an attempt to enumerate weak cipher suites is being performed.
No public information
No known false positives
Cisco Talos Intelligence Group
No rule groups
N/A
Not Applicable
CVE-2015-2808The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue. |
|
|||||||||||||||||||||||||
©2023 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
