PT-2002-2627 · Polycom · Polycom Viavideo

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1905

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Polycom ViaVideo versions 2.2 through 3.0

Description The issue is related to a buffer overflow in the web server, which can be triggered by remote attackers sending a long HTTP GET request, resulting in a denial of service (crash).

Recommendations For Polycom ViaVideo versions 2.2 through 3.0, consider restricting access to the web server until a fix is available. As a temporary workaround, limit the length of HTTP GET requests to prevent the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-1905

Affected Products

Polycom Viavideo

References · 6

• 🔥 https://exploit-db.com/exploits/21941 · Exploit
• 🔥 http://securityfocus.com/bid/5964 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1905 · Security Note
• http://iss.net/security_center/static/10359.php · Note
• http://polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf · Note
• http://online.securityfocus.com/archive/1/295146 · Note