RIM BlackBerry Enterprise Server (BES) 4.1.6 Upgrade Addresses Critical PDF Flaw
Research In Motion (RIM) has released an upgrade to its BlackBerry Enterprise Server (BES) software that fixes a previously disclosed vulnerability and provides new e-mail and calendaring functionality for administrators and corporate smartphone users.
By Al Sacco
Managing Editor, CIO
Research In Motion (RIM) on Thursday quietly released an upgrade to its BlackBerry Enterprise Server (BES) software, BES 4.1 service pack 6 (SP6), or BES v4.1.6, for Microsoft Exchange and Lotus Domino. The update follows a security advisory issued by RIM last week regarding a critical flaw in BES versions 4.1.3 through 4.1.5 that could enable hackers to hijack users’ BES infrastructure.
“In regard to the precautionary security advisory issued by RIM which informed customers about a potential vulnerability in BlackBerry Enterprise Server versions 4.1.3 through 4.1.5, there were no customer reports of any actual problems relating to this vulnerability and RIM has since provided software updates that resolve the issue,” according to a RIM spokesperson. “Note: The vulnerability does not exist in the newly released BlackBerry Enterprise Server 4.1.6.”
In addition to fixing the flaw, which was ranked by RIM as a nine on a scale of one to 10 with 10 being the most serious, the upgrade also makes a handful of new features and functionality available to both corporate BlackBerry users and administrators.
For instance, BlackBerry users on BES 4.1.6 can now receive HTML and rich-content e-mail by default, as long as their devices are running handheld OS v4.5. (BlackBerry OS v4.5 is not yet officially available from U.S. carriers, though beta versions have been bouncing around the Web for some time and official versions are expected in the near future.) For more information on the potential effects of supporting full HTML e-mail in a corporate environment, visit the Documentation for Administrators section of RIM’s site.
As part of BES 4.1.6, BlackBerry administrators now have new support for Microsoft Office Communications Server 2007 and IBM Lotus Sametime v8.0, as well as new naming conventions for the collaboration clients and a new BlackBerry calendar synchronization tool, among other enhancements.
Al Sacco was a journalist, blogger and editor who covers the fast-paced mobile beat for CIO.com and IDG Enterprise, with a focus on wearable tech, smartphones and tablet PCs. Al managed CIO.com writers and contributors, covered news, and shared insightful expert analysis of key industry happenings. He also wrote a wide variety of tutorials and how-tos to help readers get the most out of their gadgets, and regularly offered up recommendations on software for a number of mobile platforms. Al resides in Boston and is a passionate reader, traveler, beer lover, film buff and Red Sox fan.