Detections
Analytics
BlackBerry Link Multiple Vulnerabilities
medium Nessus Plugin ID 71040
Language:
Synopsis
The remote host has software installed that is affected by multiple vulnerabilities.Description
The remote host has a version of BlackBerry Link installed that is prior to version 1.2.1.31. Such versions are affected by multiple vulnerabilities :- A WebDAV server that listens on an IPv6 address allows remote access to the host's file system. It may also be possible to utilize this vulnerability via a DNS rebinding attack to execute arbitrary code by tricking a user into opening a specially crafted page.
(CVE-2013-3694)
- A flaw in Peer Manager on Mac OS X may allow context-dependent attackers to bypass access restrictions on remote file-access folders for WebDAV requests. (CVE-2013-6798)
Solution
Upgrade to BlackBerry Link 1.2.1.31.See Also
Plugin Details
Severity: Medium
ID: 71040
File Name: blackberry_link_1_2_1_31.nasl
Version: 1.2
Type: local
Agent: windows
Family: Windows
Published: 11/22/2013
Updated: 6/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:blackberry:blackberry_link
Required KB Items: SMB/blackberry_link/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 11/12/2013
Vulnerability Publication Date: 11/12/2013
Reference Information
CVE: CVE-2013-3694, CVE-2013-6798