CVE-2002-0626

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089
http://www.ciac.org/ciac/bulletins/m-123.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9347.phpVendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
http://www.securityfocus.com/bid/5631Vendor Advisory
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089
http://www.ciac.org/ciac/bulletins/m-123.shtmlPatch, Vendor Advisory
http://www.iss.net/security_center/static/9347.phpVendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
http://www.securityfocus.com/bid/5631Vendor Advisory

Timeline

Published: Jan 7, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-06277.5The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requ CVE-2002-06287.5The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for rem CVE-2002-06295.0The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connection CVE-2002-06305.0The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed I CVE-2002-06317.2Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root CVE-2002-06325.0Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.CVE-2002-06377.5InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC spe CVE-2002-06386.2setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a te CVE-2002-06399.8Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentica CVE-2002-064010.0Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses du CVE-2002-06417.5Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows att CVE-2002-06427.2The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop