Description
The Telnet service for Polycom ViewStation before 7.2.4 does not restrict the number of failed login attempts, which makes it easier for remote attackers to guess usernames and passwords via a brute force attack.
References
- 5635 vdb-entry
- viewstation-telnet-login-dos(9349) vdb-entry
- 20020904 Multiple Remote Vulnerabilities in Polycom Videoconferencing Products third-party-advisory
- http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdf
- viewstation-telnet-login-info-disclosure(44241) vdb-entry
- M-123 third-party-advisory government-resource