BlackBerry Enterprise Server Multiple Vulnerabilities

Last Update Date: 14 Feb 2013 17:47 Release Date: 14 Feb 2013 3882 Views

RISK: High Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in BlackBerry Enterprise Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities exist in the bundled version of LibTIFF, which is used by the BlackBerry Mobile Data System Connection Service and the BlackBerry Messaging Agent.

Impact

Remote Code Execution

System / Technologies affected

BlackBerry Enterprise Server Express versions 5.0.4 and prior for Microsoft Exchange and IBM Lotus Domino
BlackBerry Enterprise Server versions 5.0.4 and prior for Microsoft Exchange, IBM Lotus Domino, and Novell Groupwise

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to a fixed version or apply interim security update.

Vulnerability Identifier

Source

Secunia