PT-2007-4744 · Research In Motion · Blackberry Enterprise Server

Published 2007-06-28 · Updated 2017-07-29 · CVE-2007-3483

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Research in Motion BlackBerry Enterprise Server versions 4.0 through 4.1

Description The default configuration of the software permits the installation of arbitrary third-party applications on BlackBerry devices. This could potentially allow the loading of malware.

Recommendations For versions 4.0 through 4.1, change the default configuration to restrict the installation of third-party applications on BlackBerry devices.

Fix

Related Identifiers

CVE-2007-3483

Affected Products

Blackberry Enterprise Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3483 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35442 · Note
• http://praetoriang.net/presentations/blackjack.html · Note
• http://blackberry.com/btsc/articles/968/KB05499_f.SAL_Public.html · Note