Research In Motion Blackberry Remote Denial of Service Vulnerability
BID:11389
Info
Research In Motion Blackberry Remote Denial of Service Vulnerability
| Bugtraq ID: | 11389 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2004-1597 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2004 12:00AM |
| Updated: | Jul 12 2009 07:06AM |
| Credit: | The individual responsible for the discovery of this issue is currently unknown; HexView is credited with disclosure of this issue. |
| Vulnerable: |
Rim Blackberry 7230 3.7.1 .41 |
| Not Vulnerable: |
Rim Blackberry 7230 4.0 Rim Blackberry 7230 3.8 |
Discussion
Research In Motion Blackberry Remote Denial of Service Vulnerability
The Research In Motion Blackberry 7230 is affected by a remote denial of service vulnerability. This issue is due to the device attempting to copy a long message in to flash memory.
An attacker may leverage this issue to cause the affected device to restart, causing a loss of all email messages saved on the device.
Update: This issue was originally identified as a buffer overflow vulnerability. New information suggests that it is only a remote denial of service condition. This BID is being updated to reflect this information.
The Research In Motion Blackberry 7230 is affected by a remote denial of service vulnerability. This issue is due to the device attempting to copy a long message in to flash memory.
An attacker may leverage this issue to cause the affected device to restart, causing a loss of all email messages saved on the device.
Update: This issue was originally identified as a buffer overflow vulnerability. New information suggests that it is only a remote denial of service condition. This BID is being updated to reflect this information.
Exploit / POC
Research In Motion Blackberry Remote Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Research In Motion Blackberry Remote Denial of Service Vulnerability
Solution:
The vendor has reported that this issue has been addressed in version 3.8 and 4.0 of the handheld software.
Additionally, the vendor has released server level updates:
BlackBerry Enterprise Server 4.0
BlackBerry Enterprise Server 3.6 Service Pack 4 Hot Fix #1 for Microsoft Exchange
BlackBerry Enterprise Server for IBM Lotus Domino version 2.2 Service Pack 4 Hot Fix #1
These updates will prevent the servers from delivering malicious meeting request messages to the handheld devices.
Solution:
The vendor has reported that this issue has been addressed in version 3.8 and 4.0 of the handheld software.
Additionally, the vendor has released server level updates:
BlackBerry Enterprise Server 4.0
BlackBerry Enterprise Server 3.6 Service Pack 4 Hot Fix #1 for Microsoft Exchange
BlackBerry Enterprise Server for IBM Lotus Domino version 2.2 Service Pack 4 Hot Fix #1
These updates will prevent the servers from delivering malicious meeting request messages to the handheld devices.
References
Research In Motion Blackberry Remote Denial of Service Vulnerability
References:
References:
- Blackberry 7230 Information Page (Research In Motion)
- RIM Blackberry buffer overflow, DoS, data loss (HexView)
- RIM Blackberry DoS, data loss (HexView)
- Support - RIM analysis of HexView advisory titled BlackBerry buffer overflow, Do (Research in Motion)