Kace Response to Sweet32 Vulnerability (CVE-2016-2183) (4278258)

The KACE Systems Management Appliance is a comprehensive systems management solution that streamlines asset management, secures all network connected devices, and more efficiently services end user systems – giving resource constrained IT organizations more time to innovate.

Sweet32 is an attack that takes advantage of design weaknesses in some ciphers.  The vulnerable ciphers (Triple-DES and Blowfish) are used in common Internet protocols.  Researchers found that 1–2% of all HTTPS web servers use Triple-DES, and even less (0.6%) are configured such that they are vulnerable to this attack.  The attacker needs to keep the victim on the page hosting the malicious JavaScript for one to two days, in order to generate enough ciphertext blocks to find a collision.