BlackBerry Enterprise Server Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Research In Motion Blackberry Enterprise Server
Description:
--------------------------------------------------------------------------------
Bugtraq id: 49098

BlackBerry Enterprise Server is an Enterprise edition Server software that allows end users to wirelessly access commercial applications and provide advanced smart phone functions.

The BlackBerry Enterprise Server has a remote code execution vulnerability. Remote attackers can exploit this vulnerability to execute arbitrary code with the permissions of the current Logon account.

<* Source: vendor

Link: http://blackberry.com/btsc/KB27244
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Research In Motion
------------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.blackberry.com/support/index.shtml