CVE-2002-0628

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-307

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089Broken Link
http://www.ciac.org/ciac/bulletins/m-123.shtmlBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9349.phpBroken Link, Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdfProduct
http://www.securityfocus.com/bid/5635Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241Third Party Advisory, VDB Entry
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089Broken Link
http://www.ciac.org/ciac/bulletins/m-123.shtmlBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/9349.phpBroken Link, Vendor Advisory
http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdfProduct
http://www.securityfocus.com/bid/5635Broken Link, Third Party Advisory, VDB Entry, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44241Third Party Advisory, VDB Entry

Timeline

Published: Jan 7, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-06295.0The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via multiple connection CVE-2002-06305.0The Telnet service for Polycom ViewStation before 7.2.4 allows remote attackers to cause a denial of service (crash) via long or malformed I CVE-2002-06317.2Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root CVE-2002-06325.0Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.CVE-2002-06377.5InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC spe CVE-2002-06386.2setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a te CVE-2002-06399.8Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentica CVE-2002-064010.0Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses du CVE-2002-06417.5Buffer overflow in bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows att CVE-2002-06427.2The registry key containing the SQL Server service account information in Microsoft SQL Server 2000, including Microsoft SQL Server Desktop CVE-2002-06434.6The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions an CVE-2002-06447.5Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allo