BES-CMS 0.4/0.5 folder.php File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...

CVE-2013-3693

The BlackBerry Universal Device Service in BlackBerry Enterprise Service BES 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation RMI interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098...

CVE-2013-3693

The CVE-2013-3693 issue affects BlackBerry Enterprise Service (BES) 10.0–10.1.2, where the Universal Device Service (UDS) fails to restrict access to the JBoss RMI interface on port 1098, allowing a remote attacker in an adjacent network to upload and execute arbitrary packages. Remediation: upda...

BlackBerry Releases Security Advisory

BlackBerry has released a security advisory to address a vulnerability that affects the BlackBerry Universal Device Service installed by default with BlackBerry® Enterprise Service BES versions 10.0 to 10.1.2. This vulnerability could potentially allow an attacker to obtain escalation of privileg...

BlackBerry Vulnerability Could Allow Access to Enterprise Server

A vulnerability exists in some components of BlackBerry mobile devices that could grant attackers access to instances of the company’s Enterprise Server BES, according to Research in Motion RIM, which issued an alert and released a patch for the vulnerability last week via its Knowledge Base...

CVE-2011-0290

The BlackBerry Collaboration Service in Research In Motion RIM BlackBerry Enterprise Server BES 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages,...

CVE-2011-0290

The CVE-2011-0290 entry concerns the BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino. Affected component: BlackBerry Collaboration Service. Description states that remote authenticated users ...

Severe Remote Flaw Fixed in BlackBerry Enterprise Server

There are remotely and easily exploitable vulnerabilities in the BlackBerry Enterprise Server that could allow an attacker to gain access to the server by simply sending a malicious image file to a user’s BlackBerry device. The vulnerabilities are in several version of BES for Exchange, Lotus...

Design/Logic Flaw

Unspecified vulnerability in the BlackBerry Administration API in Research In Motion RIM BlackBerry Enterprise Server BES software 5.0.1 through 5.0.3, and BlackBerry Enterprise Server Express software 5.0.1 through 5.0.3, allows remote attackers to read text files or cause a denial of service vi...

CVE-2011-0287

BlackBerry BES and BES Express versions 5.0.1–5.0.3 contain an unspecified vulnerability in the BlackBerry Administration API that could allow remote attackers to read text files or trigger a denial of service via unknown vectors. Connected sources confirm affected products and versions, but do n...

CVE-2011-0286

CVE-2011-0286 is an XSS vulnerability in the BlackBerry Web Desktop Manager component of BlackBerry BES/BES Express (versions before 5.0.2 MR5, 5.0.3 before MR1, and 5.0.1–5.0.2 for BES Express). The issue arises from the displayErrorMessage parameter in the ManageDevices action, allowing remote ...

CVE-2010-2601

Multiple buffer-overflow vulnerabilities in the PDF distiller of the Attachment Service in BlackBerry Enterprise Server (BES) and related BlackBerry software (versions 4.1.7 and earlier; 5.0.0–5.0.2; BlackBerry Professional Software 4.1.4 and earlier) allow user-assisted remote attackers to cause...

CVE-2009-4778

CVE-2009-4778 affects Research In Motion/BlackBerry BES and BlackBerry Professional Software, where the PDF distiller in the Attachment Service is vulnerable to user‑assisted remote exploitation via a crafted PDF file attachment. The issue enables a denial of service (memory corruption) and poten...

CVE-2009-2643

The connected Red Hat and NVD entries confirm CVE-2009-4778 and related disclosures affect the PDF distiller in the Attachment Service of Research In Motion (RIM) BlackBerry BES and BlackBerry Professional Software. A crafted PDF file attachment can lead to a denial of service (memory corruption)...

CVE-2009-0307

Cross-site scripting XSS vulnerability in the "Customize Statistics Page" admin/statistics/ConfigureStatistics in the MDS Connection Service in Research in Motion RIM BlackBerry Enterprise Server BES before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the 1...

CVE-2009-0307

The CVE-2009-0307 issue affects BlackBerry Enterprise Server (BES) MDS Connection Service, specifically the admin/statistics/ConfigureStatistics page. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient input validation in multiple parameters (customDate, interval, lastC...

Code injection

The PDF distiller in the Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote...

CVE-2009-0219

The PDF distiller in the Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 performs delete operations on uninitialized pointers, which allows user-assisted remote...

CVE-2009-0219

Technical details for CVE-2009-0219 are not publicly available in the provided documents; monitor for updates.

Heap overflow

Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion RIM BlackBerry Enterprise Server BES 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute...