Pepi Zawodsky

The issue allows remote attackers to defeat cryptographic protection mechanisms, potentially via unspecified vectors, due to the support of the RC4 cipher.

The issue is related to the Web Server component in Apple OS X Server, which supports the RC4 algorithm. This makes it easier for remote attackers to defeat cryptographic protection mechanisms. The vulnerability is associated with errors in cryptographic transformations, allowing a remote attacker to exploit and compromise the cryptographic protection mechanism.

The issue allows user-assisted remote attackers to obtain sensitive information by sniffing the network in certain circumstances involving a paste into the address bar, where http requests are made for https URIs.