|
|
|
|
| |
Credit:
The information has been provided by Vincenzo Iozzo, Ralf Philipp Weinmann, and Willem Pinckaers.
The original article can be found at: http://btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB26132&sliceId=2&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
|
| |
Vulnerable Systems:
*BlackBerry 6 software
Immune Systems:
*BlackBerry Device Software versions earlier than 6.0
*BlackBerry 7 and later
*BlackBerry Enterprise Server
*BlackBerry Internet Service
*BlackBerry Desktop Manager
*BlackBerry Mobile Voice System
Security issues exist in the versions of the Apache Tomcat web server that some BlackBerry Enterprise Server components use to serve administration pages. The BlackBerry Administration Service, the BlackBerry Mobile Data System Connection Service, and the BlackBerry Monitoring Service use the Apache Tomcat web server.
These issues primarily affect the Apache Tomcat web server version that the BlackBerry Administration Service uses. Some minor issues impact the BlackBerry Mobile Data System Connection Service and the BlackBerry Monitoring Service. These issues do not affect BlackBerry messaging.
Vendor Status:
Blackberry had issued an update for this vulnerability
Patch Availability:
http://btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB26132&sliceId=2&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
CVE Information:
CVE-2011-1202
|
|
|
|
|