PT-2002-2628 · Polycom · Polycom Viavideo

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1906

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Polycom ViaVideo versions 2.2 through 3.0

Description The issue allows remote attackers to cause a denial of service by consuming CPU resources. This is achieved by sending incomplete HTTP requests and leaving the connections open.

Recommendations For Polycom ViaVideo versions 2.2 through 3.0, consider restricting access to the web server to minimize the risk of exploitation. As a temporary workaround, implement measures to limit the number of open connections to the web server until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1906

Produtos afetados

Polycom Viavideo

Referências · 6

• 🔥 http://securityfocus.com/bid/5962 · Exploit
• 🔥 https://exploit-db.com/exploits/21939 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1906 · Nota de Segurança
• http://online.securityfocus.com/archive/1/295146 · Nota
• http://polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf · Nota
• http://iss.net/security_center/static/10360.php · Correção