Weak Encryption in RIM BlackBerry Desktop Software's Offline Backup Mechanism

Weak Encryption in RIM BlackBerry Desktop Software's Offline Backup Mechanism

CVE-2010-3741 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:N/A:N

The offline backup mechanism in Research In Motion (RIM) BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack.

Learn more about our Cis Benchmark Audit For Desktop Software.