BlackBerry Enterprise Server MDS Connection Service Cross Site Scripting Vulnerability
|
Bugtraq ID:
|
34573
|
|
Class:
|
Input Validation Error
|
|
CVE:
|
CVE-2009-0307
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Apr 16 2009 12:00AM
|
|
Updated:
|
Apr 17 2009 06:16PM
|
|
Credit:
|
Ken Millar of Sensient Technologies Corporation, Michael Thumann of ERNW, and Martin O'Neal and Stephen de Vries of Corsaire
|
|
Vulnerable:
|
Research In Motion Blackberry Enterprise Server 4.1.6 MR4
Research In Motion Blackberry Enterprise Server 4.1.6
Research In Motion Blackberry Enterprise Server 4.1.5
Research In Motion Blackberry Enterprise Server 4.1.4
Research In Motion Blackberry Enterprise Server 4.1.3
Research In Motion Blackberry Enterprise Server 4.0.3
Research In Motion Blackberry Enterprise Server 4.0
Research In Motion Blackberry Enterprise Server 2.0 .0.65
Research In Motion Blackberry Enterprise Server 4.0 SP3
|
|
|
|
Not Vulnerable:
|
Research In Motion Blackberry Enterprise Server 4.1.6 MR5
|
|