CVE-2002-0628
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
| Software | From | Fixed in |
|---|---|---|
| polycom / viewstation_512 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_h.323 | 7.2 | 7.2.x |
| polycom / viewstation_sp_384 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_mp | 7.2 | 7.2.x |
| polycom / viewstation_h.323 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_128 | 7.2 | 7.2.x |
| polycom / viewstation_dcp | 7.2 | 7.2.x |
| polycom / viewstation_v.35 | 7.2 | 7.2.x |
| polycom / viewstation_512 | 7.2 | 7.2.x |
| polycom / viewstation_sp_384 | 7.2 | 7.2.x |
| polycom / viewstation_v.35 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_fx_vs4000 | 4.1.5 | 4.1.5.x |
| polycom / viewstation_128 | 6.5.1 | 6.5.1.x |
| polycom / viewstation_dcp | 6.5.1 | 6.5.1.x |
| polycom / viewstation_mp | 6.5.1 | 6.5.1.x |
- http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089
- http://www.ciac.org/ciac/bulletins/m-123.shtml
- http://www.iss.net/security_center/static/9349.php
- http://www.polycom.com/common/pw_item_show_doc/0,,1444,00.pdf
- http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
- http://www.securityfocus.com/bid/5635
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44241
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime