|
BlackBerry Enterprise Server Mobile Data Service Denial of Service
|
|
Secunia Advisory:
|
SA13861
|
|
|
Release Date:
|
2005-01-17
|
|
Popularity:
|
13,083 views
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Partial Fix
|
|
| Software: | BlackBerry Enterprise Server for Domino 2.x
BlackBerry Enterprise Server for Domino 4.x
BlackBerry Enterprise Server for Exchange 3.x
BlackBerry Enterprise Server for Exchange 4.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
A vulnerability has been reported in BlackBerry Enterprise Server, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to an error in the Mobile Data Service when processing WML (Wireless Markup Language) pages and can be exploited by tricking a user into viewing a malicious WML page containing an URL without space characters in the comment block.
Successful exploitation causes a 100% CPU utilisation.
Solution:
The vulnerability has been fixed in the following versions:
* BlackBerry Enterprise Server for Domino 2.2 Service Pack 4 Hot Fix 2
* BlackBerry Enterprise Server for Microsoft Exchange 3.6 Service Pack 4 Hot Fix 2
Secunia is currently not aware of any available fixes for the following affected versions:
* BlackBerry Enterprise Server for Microsoft Exchange 4.0
* BlackBerry Enterprise Server for Domino 4.0
Provided and/or discovered by:
Reported by vendor.
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
