CVE-2013-3693 | BDVDB-2026-57897 Detail

Description#

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://btsc.webapps.blackberry.com/btsc/viewdocument.do%3Bjsessionid=1C7CE6911426BCFAF2A80C3834F4DF0F?externalId=KB35139&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
http://secunia.com/advisories/55187

Exploit#

No public exploit known

History#

Version 12013-10-11Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.