SQL query to get #BlackBerry User information

So following on from my last post (http://blog.flaphead.com/2013/04/23/using-powershell-to-run-a-sql-command/) I use this SQL query to dump BlackBerry User information in to a #Powershell array so I can export it out.

SELECT [ServerConfig]. [ServiceName]
      , [UserConfig]. [DisplayName]
      , [UserConfig]. [UserName]
      , [userconfig]. [MailboxSMTPAddr] as [SMTPAddress]
      , [SyncDeviceMgmtSummary]. [ModelName]
      , [SyncDeviceMgmtSummary]. [PhoneNumber]
      , [SyncDeviceMgmtSummary]. [PlatformVer]
      , [SyncDeviceMgmtSummary]. [IMEI]
      , [SyncDeviceMgmtSummary]. [HomeNetwork]
      , [SyncDeviceMgmtSummary]. [AppsVer]
      , [UserConfig]. [PIN]
      , [ITPolicy2]. [PolicyName]
      , [UserConfig]. [MailboxSMTPAddr]
      , [UserConfig]. [MailboxDN]
      , [UserConfig]. [ServerDN] as [ExchangeServer]
      , [UserConfig]. [AgentId]
      , [UserConfig]. [RoutingInfo]
      , [UserStats]. [MsgsPending]
      , [UserStats]. [LastFwdTime]
      , [UserStats]. [LastSentTime]
      , CASE [UserStats] . [Status]
            WHEN 13 THEN ‘Stopped’
            WHEN 12 THEN ‘Running’
            WHEN 9  THEN ‘Redirection disabled’
            WHEN 0  THEN ‘Initializing’
            ELSE ‘Unknown [‘ + CONVERT (varchar , [UserStats]. [Status] ) + ‘]’
        END AS UserStatus
  FROM [dbo] . [UserConfig]
   LEFT OUTER JOIN [dbo] .[UserStats]
    ON [UserConfig]. [Id] =[UserStats] . [UserConfigId]
   LEFT OUTER JOIN [dbo] .[ITPolicy2]
    ON [UserConfig]. [ITPolicy2Id] =[ITPolicy2] . [Id]
   LEFT OUTER JOIN [dbo] .[ServerConfig]
    ON [UserConfig]. [ServerConfigId] =[ServerConfig] . [Id]
   LEFT OUTER JOIN [dbo] .[SyncDeviceMgmtSummary]
    ON [UserConfig]. [Id] =[SyncDeviceMgmtSummary] . [UserConfigId]

So setting the above at $SqlQuery and then running

$SqlServer = “BlackBerry SQL Server”
$SqlDb = “BlackBerry Database Name”
RunSqlQuery  $SqlServer $SqlDb $SqlQuery

 

BlackBerry Enterprise Server Interim Security Update for February 12,2013

Saw this today ..

Fixed issues

Vulnerabilities existed in how the BlackBerry MDS Connection Service, BlackBerry Collaboration Service, and the BlackBerry Messaging Agent processed TIFF images for rendering on BlackBerry devices. These vulnerabilities could have allowed a potentially malicious user to execute arbitrary code using the privileges of the BlackBerry Enterprise Server login account. (DT 5468999, DT 5542642, DT 5890761, and DT 6098370)

These issues are resolved by this interim security software update. The update replaces the image.dll file that the affected components use with an image.dll file that is not affected by the vulnerabilities. For more information, visit www.blackberry.com/btsc to read KB33425.

#Powershell Service Uptime

So i wanted to see how long a couple of BlackBerry servers had been up, but I wanted to know how long the services has been running.  So i knocked this up.  Its dead simple to change for other services!

$Servers = "BES01", "BES02"
$Matrix = @()
ForEach($Server in $Servers){
  Write-Host $Server -Foregroundcolor Green
  $SVC = Get-Service -ComputerName $Server | Where {$_.Name -like "Black*"}
  Foreach($item in $SVC){
    $tmpMatrix="" | Select Server, Service, State, Uptime
    Write-Host "-" $Item.Name
    $tmpMatrix.Server = $Server
    $tmpMatrix.Service = $item.Name
    $s = gwmi win32_service -ComputerName $Server -filter "name = ‘$($item.Name)’"
    $tmpMatrix.State = $s.State
    If ($s.State -eq "Running"){
      $tmpUpTime = "{0}" -f ((get-date) – ([wmi]”).ConvertToDateTime((gwmi Win32_Process  -ComputerName $Server -filter "ProcessID = ‘$($s.ProcessId)’").CreationDate))
      $tmpMatrix.Uptime = $tmpUpTime
    }
    $Matrix += $tmpMatrix
  }
}
  $Matrix

#BlackBerry March 2012 Daylight Savings Time Information

the March 2012 Daylight Savings Time Update will be made public shortly. It includes the following updates:

New Time Zones:

 

Country

Time Zone

DST Start

DST End

Russia

Kaliningrad (GMT +3)*

No Daylight Savings Time

Novosibirsk (GMT +7)*

Samoa

Apia (GMT +13)

Saturday, September 29 at 3:00AM

Sunday, April 1 at 4:00AM

Updated Time Zones:

 

Country

Time Zone

DST Start

DST End

Israel

Jerusalem

Friday, March 30, 2012 at 2:00AM

Sunday, September 23, 2012 at 2:00AM

Chile

Santiago

Midnight between Saturday, September 1 and Sunday, September 2, 2012

Midnight between Saturday, April 28 and Sunday, April 29, 2012

Jordan

Amman (GMT +2)

Midnight between Thursday, March 29 and Friday, March 30, 2012 local standard time

Friday, October 26, 2012 at 1:00 AM

Iran

Tehran (GMT +3:30)

Midnight between Tuesday, March 20 and Wednesday, March 21, 2012

Midnight between Thursday, September 20 and Friday, September 21, 2012

Brazil

Ciuaba (GMT -4)*

Midnight between Saturday, October 20 and Sunday, October 21, 2012

Midnight between Saturday, February 25 and Sunday, Feburary 26, 2012

Fiji

Fiji (GMT +12)*

Sunday, October 21, 2012 at 2:00AM

Sunday, January 22, 2012 at 3:00AM

Belarus

Minsk (GMT +3)

DST has been removed and the GMT offset has been set to +3

Russia

Yerevan

DST has been removed

Note: Ciuaba (GMT -4) has been renamed from Manaus (GMT -4)

#BlackBerry Enterprise Transporter helps make user migration a breeze

Interesting read if you didn’t know

http://www.blackberry.com/newsletters/technicalsupport/solve/2012_03/2012_03_a01.shtml?version=premier&RMID=B2B_201203_Solve_Newsletter&RRID=4B8E2731E77565B2E10000000A50143D

The new BlackBerry® Enterprise Transporter is designed to make BlackBerry smartphone user migration easier, and is an integral part of BlackBerry® Enterprise Server software version 5.0. This article tells you more about the benefits of the BlackBerry Enterprise Transporter and how this enhanced migration tool works.

As your organization grows, BlackBerry smartphone users may be spread across multiple locations. In turn, administration can become a little more challenging. The BlackBerry Enterprise Transporter may help by allowing you to transfer multiple BlackBerry smartphone user accounts from one BlackBerry® Domain to another with little to no impact on, or action required by, your BlackBerry smartphone users – all through one, centralized console.

When to use it

The BlackBerry Enterprise Transporter is designed to allow organizations to migrate BlackBerry smartphone users to the new BlackBerry Enterprise Server v5.0, rather than updating their live environment. This user migration tool can be accessed using either Windows® Explorer or the command prompt window.

You will find the BlackBerry Enterprise Transporter useful when you are migrating BlackBerry smartphone users from:

1 An earlier BlackBerry Enterprise Server software version to BlackBerry Enterprise Server v5.0

2 A production BlackBerry Domain to a test domain and then back again

3 A BlackBerry Enterprise Server v4.x to an empty BlackBerry Enterprise Server v4.x with a new BlackBerry Configuration Database.

Note: The BlackBerry Enterprise Transporter is not recommended for moving BlackBerry smartphone users from a production instance of BlackBerry Enterprise Server v4.x to another production instance of BlackBerry Enterprise Server v4.x Note: Before running the BlackBerry Enterprise Transporter, you must install the BlackBerry User Administration Service.

Using the BlackBerry Enterprise Transporter

There are two methods of migration using the BlackBerry Enterprise Transporter: Live Mode and Bulk Mode. Live Mode is designed to allow you to move BlackBerry smartphone users between two active BlackBerry Enterprise Server instances. Bulk Mode requires the source BlackBerry Enterprise Server instance to be shut down. Generally, administrators prefer to use Live Mode so that they can try to minimize downtime for their BlackBerry smartphone users.

The following steps describe using the Live Mode migration method – the more commonly used method to move one or more BlackBerry smartphone users from an instance of BlackBerry Enterprise Server v4.1.x to a separate BlackBerry Enterprise Server v5.0 instance.

Moving BlackBerry smartphone users to a separate BlackBerry Enterprise Server v5.0

1) Find the UserMigrationTool.exe From the command prompt window, navigate to UserMigrationTool.exe or double-click the UserMigrationTool.exe file to open the BlackBerry Enterprise Transporter.

2) Create a manifest file Under the Configuration tab click the "New" button to create a manifest file. (You can also create your own manifest file using an XML editor)

3) Save the manifest file Click "Save" after you select the name for your manifest file. The manifest file contains information about the BlackBerry Domain instances, default settings, and email addresses that the BlackBerry Enterprise Transporter requires to run the migration process.

4) Configure source database and test connection In the BlackBerry Enterprise Transporter, under the Configuration tab, click "Configuration" under Source Domain. The information you enter here is added to the manifest file created earlier. Click "Test Connection" to validate the connection with the Microsoft® SQL Server® you entered, and then click "Ok".

5) Configure destination database In the BlackBerry Enterprise Transporter, under the Configuration tab, click "Configuration" under Destination Domain. The information you enter here is added to the manifest file created earlier. Click "Test Connection" to validate the connection with the Microsoft SQL Server you entered, and then click "Ok".

6) Configure User Manifest In the BlackBerry Enterprise Transporter, under the Configuration tab, click "Details". Select the destination BlackBerry Enterprise Server name, group name, IT policy, and software configuration. Once you have selected all your options, click the "Find Users" button.

7) Options for Finding BlackBerry smartphone users Select one of three options to search for the BlackBerry smartphone users you want to migrate. Search for BlackBerry smartphone users at the BlackBerry Domain, BlackBerry Enterprise Server, or Enterprise group level. Select the search option you want to use, click "Find". BlackBerry smartphone users are listed under the Users list. Select the BlackBerry smartphone users you want to add, and click the "Add" button. The BlackBerry smartphone users you select appear in the Select Users column. Click "Done" when you have selected all of the BlackBerry smartphone users.

8) View the BlackBerry smartphone users you’ve selected The BlackBerry smartphone users you selected are listed in the User Manifest Configuration screen. Click "Done".

9) View migration information Click the Preview button to view your migration information so far. When a migration preview is successful, you will see a green check mark. If a migration preview fails, you will see a red X.

10) Almost Done! Begin migrating BlackBerry smartphone users Click "Migrate". The Console tab shows you a step-by-step log file that details what the BlackBerry Enterprise Transporter is doing. This information is also written to the log file that is created in the same location as the UserMigrationTool.exe.

There are three configuration options available:

• Turbo Mode – Skips confirmation of IT administration commands

• Trigger Slow Synchronization (SlowSync) – Starts the wireless synchronization of organizer data when the migration process is complete

• Ignore Warnings – Skips validation warnings

11) You’re done! When the migration is complete, you will see a Migration window and a confirmation message.

#BlackBerry Enterprise Server

humm .. BES 5.0.3 MR7 and BES 5.0.4 coming soon?

BlackBerry February 2012 – Daylight Savings Time Update

#BlackBerry

http://www.blackberry.com/btsc/KB29833

The February 2012 Daylight Savings Time (DST) update is cumulative and includes updates to the following Time Zones:

Country Time Zone DST Start DST END
Russia Kaliningrad (GMT +3)

No Daylight Savings Time

Novosibirsk (GMT +4)

Updated Time Zones:

Country Time Zone DST Start DST End
Fiji Fiji (GMT +12) Sunday, October 21, 2012 at 2:00am Sunday, January 22, 2012 at 3:00AM
Brazil Ciuaba (GMT -4) Midnight between October 20 and 21, 2012 Midnight between February 25 and 26, 2012
*Note: Ciuaba (GMT -4) has been renamed from Manaus (GMT -4)

 


Details for Brazil are listed for both Microsoft (Exchange) and IBM (Domino) below:-

Microsoft OS/Exchange Platform

Domino Platform

RIM / BlackBerry buyout

#BlackBerry
Number of interesting articles in the news over the last couple of days, with the likes of Amazon and Microsoft / Nokia looking at buying RIM.

Could be interesting to see where this goes, especially with the fact that RIM licences ActiveSync from Microsoft already and the new BBx devices may or may not ;-) natively support the ActiveSync protocol.

Think it would be good for Microsoft / Nokia to takem, Nokia with the devices and Microsoft with the server products .. Let’s see … Wonder if you can get Windows Phone 7 ported to a playbook?

RIM delays BlackBerry 10 phones until late 2012

#BlackBerry

Read this in the Time today.  This is really going to mess up my roadmap Disappointed smile

http://www.manufacturingdigital.com/technology/rim-delays-blackberry-10-phones-until-late-2012

Former king of the corporate smartphone market BlackBerry looks set to lose further ground to rivals Apple, Samsung, HTC and the rejuvenated Nokia. Research In Motion (RIM) revealed that its range of BlackBerry 10 devices will not come out until late 2012.

The range of smartphones were due to be released in the first quarter of next year, however RIM’s co-CEO Mike Lazaridis told analysts on a conference call that a required highly integrated chipset would not be available until mid-2012.

BES 5.0 SP3 MR 6

#BlackBerry #Exchange #Exchange 2010

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 | Service Pack: 3 | Maintenance
Release: 6

Service Pack 3 Maintenance Release 6

  • Filename: besx503mr6.zip
  • Filesize: 192 MB
  • Date posted: 14-Dec-11

http://docs.blackberry.com/en/admin/deliverables/37020/BlackBerry_Enterprise_Server_for_Microsoft_Exchange-Maintenance_Release_Notes–1931471-1130104742-001-5.0.3-US.pdf

FIXED ISSUES

Activation

  • *If you created a new user and selected Create a user with a generated activation password, the BlackBerry Administration Service did not always send the activation email. (DT 1059145)

BlackBerry Administration Service

  • *In some circumstances an exception error was displayed when an administrator searched for data using particular search criteria. (DT 2033693)
  • *The BlackBerry Administration Service became slow to respond and administrators could not log in due to an SQL disconnect. (DT 2019181)
  • Several BlackBerry Web Services API calls were not integrated with the BlackBerry Administration Service. (DT *2330494, 1970659, 1967817, 1938039, 1889249, 1889248, 1889245, 1889244, 1889215, 1889210, and 1889207)
  • After you upgraded from BlackBerry Enterprise Server 5.0 SP2 to 5.0 SP3, the BlackBerry Administration Service might not have performed as expected. This might have been the result of the BlackBerry Administration Service attempting to process a large number of tasks that it could not process during the upgrade. (DT 1968029)
  • The BlackBerry Administration Service did not clear old addresses from the database causing the database to gradually increase in size until you could not add new users. (DT 1842397)
  • *In some circumstances, administrators with the appropriate permissions were not able to see the list of users in a group. (DT 1271633)
  • *Administrators could not send IT policies through the policy server directly, which delayed the delivery of IT policies to devices because of dependencies on previous job tasks. (DT 1225228 )
  • If you upgraded BlackBerry Enterprise Server to 5.0 SP3 while the BlackBerry Administration Service was reconciling jobs, the BlackBerry Administration Service did not finish reconciling jobs after the upgrade process completed. (DT 1216175)
  • If one BlackBerry Administration Service instance sent a reconciliation task to a second instance, and the connection between the instances dropped so that the reconciliation task failed, reconciliation stopped on all BlackBerry Administration Service instances. The first BlackBerry Administration Service instance then wrote the following error to its log file: “org.jboss.remoting.CannotConnectException: Can not get connection to server. Problem establishing socket connection for InvokerLocator [sslsocket:”. The BlackBerry Administration Service checks for unprocessed reconciliation events every 24 hours and restarts them at that time. For more information, contact RIM Support. (DT 1159175)
  • *If a user switched to another device, the BlackBerry Administration Service sent applications to the device before the device had completed the activation process, and the device could not properly install the applications. (DT 1120052)
  • *If there were thousands of software configuration jobs pending, the BlackBerry Administration Service became unresponsive and administrators were unable to log in. (DT 1087186)
  • If you set the BlackBerry Device Software deployment managed by BlackBerry Administration Service option to Yes, the BlackBerry Administration Service did not hide the Allow Wireless Security Updates IT policy rule, even though it is no longer applicable. (DT 1056730)
  • When the BlackBerry Administration Service lost a connection to the BlackBerry Configuration Database, the BlackBerry Administration Service was restarted and some events were not processed. (DT 1042891)
  • If you updated the SMTP email address of administrators with access to the BlackBerry Monitoring Service in Microsoft Active Directory, the BlackBerry Administration Service did not update the email address in the BlackBerry Configuration Database. (DT 1028523)
  • The interval for the failsafe mechanism in the BlackBerry Administration Service was too long (24 hours), which meant that some events were not processed in a timely manner. (DT 1014960)
  • *The BlackBerry Administration Service did not support searching for user accounts using the mailbox ID. As a result, if you used the BlackBerry Enterprise Server User Administration Tool, you could not search for user accounts by canonical name. (DT 604566)

BlackBerry Attachment Service

  • When a user viewed an .xls or .xlsx attachment on their device, negative percentages (example, -25%) were not displayed correctly. (DT 1428205)

BlackBerry Collaboration Service

  • Some valid characters were not permitted in the user name or domain name for Microsoft Office Communications Server. (DT 2081919)
  • *Users were unable to log in to enterprise instant messaging when the BlackBerry Enterprise Server pool and the instant messaging server pool appeared in different DNS subdomains. (DT1115118)
  • On some occasions, when users were logged in to the client for Microsoft Office Communications Server 2007 R2 on both their computer and their device, the first reply to a new chat session was not delivered. (DT 1031517)
  • If a BlackBerry device user using Microsoft Office Communications Server sent instant messages to a recipient that was logged in to both a BlackBerry device client and Microsoft Communicator Web Access, the messages were not received. (DT 525962)
  • Users were unable to re-invite participants to an expired conference. (DT 353483)

BlackBerry MDS Connection Service

  • *The BlackBerry MDS Connection Service did not send an error message to the device when it dropped a connection request. (DT 2082262)
  • *Users were unable to browse to internal and external websites from their devices because the BlackBerry MDS Connection Service stopped responding to incoming IPPP requests. (DT 2036927)
  • *Users were unable to load a map image when a direct request was made to the website. (DT 1995079)
  • *When a device was activated with a SIM card, and then the SIM card was removed, the BlackBerry Enterprise Server was unable to push data to the device over a Wi-Fi connection. (DT 1437011)
  • If you gave the Microsoft SQL Server a name that contained a "$", the BlackBerry MDS Connection Service did not start. (DT 1429111)
  • You could not send push messages to large numbers of users in groups that were on different BlackBerry Enterprise Server instances. (DT 1404460)
  • If the list of supported BlackBerry Dispatcher instances for the BlackBerry MDS Connection Service exceeded 256 characters, the BlackBerry MDS Connection Service was unable to process any push requests. (DT 1175023)
  • If you submitted a certificate request to a CA a second time for the same profile, the enrollment might have failed. (DT 1175008)
  • When you disabled the "Use scalable HTTP" feature of the BlackBerry MDS Connection Service, users could not access some HTTPS sites. (DT 1170693 and DT 1049666)
  • If a group in the BlackBerry Administration Service had users that resided on mult
    iple BlackBerry Enterprise Server instances, push messages to that group failed. (DT 1125058)
  • After a user submitted numerous certificate requests to an enterprise CA or stand-alone CA that were approved, an enrollment process might have failed while the device was waiting for an approved certificate. (DT 1116098)
  • *If your organization used a proxy server for web browsing on a device, users could not log in to an application that had been coded with the TLS setting "EndToEndRequired" (for example, BlackBerry App World™). (DT 914899)
  • If you configured integrated Windows authentication for the BlackBerry MDS Connection Service, set the File URL Pattern to .*, and created the required access control rules, when a user tried to browse to a file that included an @ (at sign) in the file name, the device could not display the file. The BlackBerry MDS Connection Service truncated the file and removed every letter before the @. The BlackBerry MDS Connection Service also logged a DFTF/1.1
    404 error message in its log file. (DT 846883)

BlackBerry Mail Store Service

  • *When a company that is hosting the BlackBerry Enterprise Server added a new user to their mail  server, they had to wait up to 24 hours before they could add the user to the BlackBerry Enterprise Server. (DT 1391094)

BlackBerry Messaging Agent

  • There is improved handling of partial name collisions that may have occurred in the LegacyExchangeDN field where the expected user account had been disabled. (DT 1448927)
  • When a missed call message was delivered to Microsoft Outlook, the same message was not delivered to the BlackBerry device. (DT 1161394)
  • *The PFContactMonitor scan was running a full scan approximately every 20 minutes, instead of once a day or on restart. (DT 1147411)
  • In some circumstances email messages were not delivered promptly because of high disk I/O on Microsoft Exchange 2010 mailbox servers. (DT 1141515)
  • *When performing a user lookup using a device, fields in the user search results might have appeared blank if the user account had multiple values entered for a field. For example, if the user account had multiple home phone numbers, the search results did not display the user’s home phone number. (DT 1002292)
  • When you composed an email message containing both Hebrew and English characters on a device, the version that was received in Microsoft Outlook was not readable because the direction of the Hebrew characters was changed. (DT 765816) Support for bi-directional languages is also dependent on an update to BlackBerry Device Software that will be available following the release of this MR.

BlackBerry Enterprise Server Resource Kit

  • The BlackBerry Enterprise Server Resource Kit 5.0 SP3 includes the BlackBerry Directory Sync Tool, which you can use to synchronize the membership of security and distribution groups in Microsoft Active Directory to selected groups in a BlackBerry Domain. In the initial release of the tool, you could not synchronize group membership  from a group in Microsoft Active Directory to a BlackBerry Enterprise Server group that had more than 2000 members. After you upgrade to BlackBerry Enterprise Server 5.0 SP3 MR3, you can make changes to the tool’s configuration file and use the tool to synchronize group membership to BlackBerry Enterprise Server groups with more than 2000 members.

    For more information about changing the maximum size of a BlackBerry Enterprise Server group that the tool can synchronize changes to, visit www.blackberry.com/go/serverdocs to read the BlackBerry Analysis, Monitoring, and Troubleshooting Tools Administration Guide. (DT 1214644)

BlackBerry Synchronization Service

  • *When a user was migrated from BlackBerry Enterprise Server 4.x to 5.x, the BlackBerry Synchronization Service did not trigger a versioning check so users could not see records belonging to any newly added or updated syncable databases. (DT 2077524)
  • When the BlackBerry Synchronization Service tried to synchronize data for many devices that were not in service, a high CPU usage resulted. (DT 1839166)
  • In certain circumstances, the throttling code scheduled more slow synchronization requests than expected, which might have increased the CPU usage on the computer where the BlackBerry Synchronization Service is installed. (DT 1008489)
  • In certain circumstances, when backing up PIN messages for a particular user account, the BlackBerry Synchronization Service stopped responding. (DT 796168)

BlackBerry Web Desktop Manager

  • When you used the default version of USB drivers to connect a BlackBerry device to BlackBerry Web Desktop Manager, sometimes the attached device was not recognized and could not be activated. (DT 1168677)

High Availability

  • *After a failover, in some circumstances the newly active BlackBerry Enterprise Server could not access a user’s mailbox. (DT 1838303)

Logging

  • SMS log files truncated the first two characters from email addresses in the To field. (DT 711626)

Organizer data synchronization

  • Contacts that used a custom message class, did not synchronize with Public Folders. (DT 1400600)
  • If you changed the Mappings settings for organizer data synchronization at the component level, the organizer data was not synchronized. (DT 1396390)

Security

  • A vulnerability in the BlackBerry Collaboration Service could have allowed a potentially malicious BlackBerry device user within an organization to log in to the BlackBerry Collaboration Service as another BlackBerry Collaboration Service user within the same organization. The potentially malicious user could then impersonate the legitimate
    user within the enterprise instant messaging environment. The vulnerability was present in the component that provides connectivity between the BlackBerry Collaboration Service and the following clients on a BlackBerry
    device:
    • BlackBerry Client for use with Microsoft Office Communications Server 2007 R2
    • BlackBerry Client for use with Microsoft Lync Server 2010
    For more information about the issue, visit www.blackberry.com/btsc to read article KB28524. (DT 2047669)
  • *Some BlackBerry Enterprise Server ports allowed weak cipher suites that should have been excluded on certain SSL encrypted connections. (DT 1254022)
  • Vulnerabilities existed in how the BlackBerry Collaboration Service and the BlackBerry Messaging Agent processed PNG images and TIFF images for rendering on BlackBerry devices. These vulnerabilities could have allowed a potentially malicious user to execute arbitrary code using the privileges of the BlackBerry Enterprise Server login
    account. (DT 1238271 and DT 1125216)
  • These issues are resolved by this maintenance release. The update replaces the image.dll file that the affected components uses with an image.dll file that is not affected by the vulnerabilities. For more information, visit www.blackberry.com/btsc to read KB27244.
  • A vulnerability existed in the BlackBerry Administration API which could have allowed an attacker to read files that contain only printable characters on the BlackBerry Enterprise Server, including unencrypted text files. Binary file formats, including those used for message storage, were not affected. This issue could have caused resource exhaustion and therefore could have been leveraged as a partial Denial of Service. The vulnerability was limited
    to the user permissions granted to the BlackBerry Administration API. (DT 1183849)
    For more information, visit www.blackberry.com/btsc and read KB27258.

SNMP

  • If SNMP for the BlackB
    erry Monitoring Service was not set up correctly, the BlackBerry MDS Connection Service continuously wrote the following error to its log file: <ERROR>:<LAYER = SCM, BMS: setConfigConfig failed rc=-1000>. (DT 891612)