The ProStructure Blog » Advisories http://www.prostructure.com/blog A blog about high-end IT Infrastructure and Security Mon, 12 Jul 2010 21:34:17 +0000 en hourly 1 http://wordpress.org/?v=3.0 Critical PDF Vulnerabilities in Blackberry Enterprise Server http://www.prostructure.com/blog/2009/01/13/critical-pdf-vulnerabilities-in-blackberry-enterprise-server/ http://www.prostructure.com/blog/2009/01/13/critical-pdf-vulnerabilities-in-blackberry-enterprise-server/#comments Tue, 13 Jan 2009 22:01:39 +0000 Amber Pham http://www.prostructure.com/blog/?p=41 Research in Motion has just released security bulletin KB17118 that announces a new set of vulnerabilities in the Blackberry Attachment Service that runs on Blackberry Enterprise Server (BES). According to Blackberry, “these vulnerabilities could enable a malicious individual to send an email message containing a specially crafted PDF file, which when opened for viewing on a BlackBerry smartphone, could cause memory corruption and possibly lead to arbitrary code execution on the computer that hosts the BlackBerry Attachment Service.”

It is strongly recommended that you read bulletin KB17118, then download and install the patch, called Service Pack 6 Interim Security Software Update 2, from http://www.blackberry.com/go/serverdownloads. The security bulletin also offers a workaround that reduces the functionality of BES but protects the server from exploits of the Attachment Service vulnerabilities.

The affected versions of the server software are BlackBerry Enterprise Server software version 4.1 Service Pack 3 (4.1.3) through 4.1 Service Pack 6 (4.1.6), including the latest maintenance release.

]]> http://www.prostructure.com/blog/2009/01/13/critical-pdf-vulnerabilities-in-blackberry-enterprise-server/feed/ 0 Heads Up! Big vulnerabilities in Cisco PIX, VMware and Mac OSX http://www.prostructure.com/blog/2008/06/09/heads-up-big-vulnerabilities-in-cisco-pix-vmware-and-mac-osx/ http://www.prostructure.com/blog/2008/06/09/heads-up-big-vulnerabilities-in-cisco-pix-vmware-and-mac-osx/#comments Mon, 09 Jun 2008 16:41:43 +0000 Irving Popovetsky http://www.prostructure.com/blog/?p=6 Last week, quite a few major vulnerabilities were discovered in some of our customer’s favorite products, namely:

  • VMWare (all products, from ESX Server all the way down to VMware Player)
  • Cisco PIX and ASA (versions 7.1, 7.2, 8.0 and 8.1)
  • Mac OS X (Both Server and Client editions, 10.4 and 10.5 are affected)

Quite a few of these vulnerabilities are remotely exploitable and especially dangerous on the PIX and unprotected OSX and VMware installations.   VMware also looks like it may have a  local “VM breakout” bug or two, watch out for these.   We strongly recommend getting these products updated as soon as possible.

For more information and relevant links, check out the US-CERT Cyber Security Bulletin SB08-161.  Search for the product you’re running on this page.

]]> http://www.prostructure.com/blog/2008/06/09/heads-up-big-vulnerabilities-in-cisco-pix-vmware-and-mac-osx/feed/ 0