CVE-2002-0627 The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polycom viewstation 128 | = 6.5.1 | No fix listed |
| polycom viewstation 128 | = 7.2 | No fix listed |
| polycom viewstation 512 | = 6.5.1 | No fix listed |
| polycom viewstation 512 | = 7.2 | No fix listed |
| polycom viewstation dcp | = 6.5.1 | No fix listed |
| polycom viewstation dcp | = 7.2 | No fix listed |
| polycom viewstation fx vs4000 | = 4.1.5 | No fix listed |
| polycom viewstation h.323 | = 6.5.1 | No fix listed |
| polycom viewstation h.323 | = 7.2 | No fix listed |
| polycom viewstation mp | = 6.5.1 | No fix listed |
| polycom viewstation mp | = 7.2 | No fix listed |
| polycom viewstation sp 384 | = 6.5.1 | No fix listed |
| polycom viewstation sp 384 | = 7.2 | No fix listed |
| polycom viewstation v.35 | = 6.5.1 | No fix listed |
| polycom viewstation v.35 | = 7.2 | No fix listed |
References
- 20020904 Multiple Remote Vulnerabilities in Polycom Videoconferencing Products third-party-advisory
- M-123 government-resource patch third-party-advisory vendor-advisory
- viewstation-unicode-retrieve-password(9348) vdb-entry vendor-advisory
- www.polycom.com
- 5632 vdb-entry vendor-advisory