PT-2010-4137 · Rim · Blackberry Desktop

Publicado 2010-12-17 · Atualizado 2011-01-12 · CVE-2010-2603

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RIM BlackBerry Desktop Software versions 4.7 through 6.0 for PC RIM BlackBerry Desktop Software version 1.0 for Mac

Description The issue allows local users to potentially decrypt a database backup file via a brute force attack due to the use of a weak password for encryption.

Recommendations For versions 4.7 through 6.0 for PC, update the software to use a stronger password for encrypting database backup files. For version 1.0 for Mac, update the software to use a stronger password for encrypting database backup files.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2010-2603

Produtos afetados

Blackberry Desktop

Referências · 7

• http://securityfocus.com/bid/45434 · Nota
• http://securitytracker.com/id?1024908 · Nota
• http://secunia.com/advisories/42661 · Aviso do Fabricante
• http://blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24764 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2603 · Nota de Segurança
• http://secunia.com/advisories/42657 · Aviso do Fabricante
• http://blackberry.com/btsc/KB24764 · Nota