Microsoft Security Advisory 2960358 Update for Disabling RC4 in .NET TLS

ronjor · Jun 19, 2014

Published: May 13, 2014 | Updated: June 19, 2014

Version: 1.1

Microsoft is announcing the availability of an update for Microsoft .NET Framework that disables RC4 in Transport Layer Security (TLS) through the modification of the system registry. Use of RC4 in TLS could allow an attacker to perform man-in-the-middle attacks and recover plaintext from encrypted sessions.

Recommendation. Microsoft recommends that customers download and test the update before deploying it in their environments as soon as possible. Please see the Suggested Actions section of this advisory for more information.

Known Issues. Microsoft Knowledge Base Article 2978675 documents the currently known issues that customers may experience when installing this update. The article also documents recommended solutions for these issues.
Click to expand...

https://technet.microsoft.com/en-us/library/security/2960358

Log in or Sign up

Microsoft Security Advisory 2960358 Update for Disabling RC4 in .NET TLS

ronjor Global Moderator

Log in or Sign up

Microsoft Security Advisory 2960358 Update for Disabling RC4 in .NET TLS

ronjor Global Moderator

Useful Searches