HTTP: Polycom Viewstation - Password Disclosure
This signature detects attempts to exploit a known vulnerability against Polycom Viewstation FX. Attackers can access a configuration file that contains the administration passwords, which is accessible by anyone in Polycom Viewstation FX 4.2.
Extended Description
Polycom ViewStation stores the administrator and software update account passwords in plain text within a HTML file. This file can be accessed through the URI http:///a_security.htm.
Affected Products
Polycom viewstation_fx/vs_4000
Short Name
HTTP:INFO-LEAK:POLYCOM
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
- Disclosure Password Polycom Viewstation bid:6447
Release Date
08/02/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Polycom