This host is installed with BlackBerry Desktop Software and is prone to Information Disclosure vulnerability.

Successful exploitation will allow attacker to obtain sensitive information that may lead to further attacks. Impact Level: Application

Upgrade to the BlackBerry Desktop Software version 6.0.1 or later, For updates refer to http://uk.blackberry.com/services/desktop/desktop_pc.jsp

The flaw is due to a 'weak password method' used in the BlackBerry Desktop Software, which allows to conduct brute force guessing attacks to decrypt the backup file.

BlackBerry Desktop Software version 4.7 through 6.0

• http://secunia.com/advisories/42657
• http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24764
• http://www.securitytracker.com/id?1024908

---

Updated on 2015-03-25