Research In Motion BlackBerry Enterprise Server

ソフト名：Research In Motion BlackBerry Enterprise Server 5.x/for Domino 4.1.4以上/for Exchange 4.1.4以上/for Novell GroupWise 4.1.4以上 (Apache Tomcat 3.x/4.x/5.x/6.x, Apache 2.2.x, OpenBSD OpenSSL 0.x)

回避策：アップデートにて対応

脆弱性：データ操作, 機密情報の奪取, DoS攻撃, XSS, CSRF, 不正HTMLの実行, スクリプトコード実行, 不正HTTPのリクエスト, メモリリーク, パスワード脆弱性, ブルートフォース攻撃, ディレクトリトラバーサル, テキスト挿入, マンインミドル攻撃, IPアドレスの曝露

ソース：http://us.blackberry.com/apps-software/server/5/

http://www.blackberry.com/products/software/server/domino/index.shtml

http://us.blackberry.com/apps-software/server/exchange/

http://www.blackberry.com/products/software/server/groupwise/index.shtml

http://www.blackberry.com/btsc/KB25966

http://www.blackberry.com/btsc/KB26296

http://secunia.com/advisories/26466/

http://secunia.com/advisories/28046/

http://secunia.com/advisories/28878/

http://secunia.com/advisories/35326/

http://secunia.com/advisories/37291/

http://secunia.com/advisories/39574/

http://secunia.com/advisories/44166/

http://secunia.com/advisories/44183/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1858

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5333

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1678

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5515

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2227

CVE：CVE-2007-1858, CVE-2007-3385, CVE-2007-5333, CVE-2008-1678, CVE-2008-5515, CVE-2009-3555, CVE-2010-2227

危険性：Medium Risk