PT-2010-4137 · Rim · Blackberry Desktop

Published 2010-12-17 · Updated 2011-01-12 · CVE-2010-2603

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RIM BlackBerry Desktop Software versions 4.7 through 6.0 for PC RIM BlackBerry Desktop Software version 1.0 for Mac

Description The issue allows local users to potentially decrypt a database backup file via a brute force attack due to the use of a weak password for encryption.

Recommendations For versions 4.7 through 6.0 for PC, update the software to use a stronger password for encrypting database backup files. For version 1.0 for Mac, update the software to use a stronger password for encrypting database backup files.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2010-2603

Affected Products

Blackberry Desktop

References · 7

• http://secunia.com/advisories/42661 · Vendor Advisory
• http://blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2603 · Security Note
• http://secunia.com/advisories/42657 · Vendor Advisory
• http://securityfocus.com/bid/45434 · Note
• http://securitytracker.com/id?1024908 · Note
• http://blackberry.com/btsc/KB24764 · Note