Polycom ViewStation ICMP Denial Of Service Vulnerability

Bugtraq ID:	5637
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2002-0630
Remote:	Yes
Local:	No
Published:	Sep 04 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Discovery of this issue is credited to Jeff Horne of the ISS X-Force.
Vulnerable:	Polycom ViewStation V.35 7.2 Polycom ViewStation V.35 6.5.1 Polycom ViewStation SP/SP384 7.2 Polycom ViewStation SP/SP384 6.5.1 Polycom ViewStation MP 7.2 Polycom ViewStation MP 6.5.1 Polycom ViewStation H.323 7.2 Polycom ViewStation H.323 6.5.1 Polycom ViewStation FX/VS 4000 4.1.5 Polycom ViewStation DCP 7.2 Polycom ViewStation DCP 6.5.1 Polycom ViewStation 512 7.2 Polycom ViewStation 512 6.5.1 Polycom ViewStation 128 7.2 Polycom ViewStation 128 6.5.1
Not Vulnerable:	Polycom ViewStation FX/VS 4000 4.2

Polycom ViewStation ICMP Denial Of Service Vulnerability

Polycom Viewstation devices are prone to a denial of service upon receipt of overly long or malformed ICMP packets. This may restrict availability of the device for legitimate users.

The device may need to be restarted to regain normal functionality.

Polycom ViewStation ICMP Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Polycom ViewStation ICMP Denial Of Service Vulnerability

Solution:
This issue has been addressed in ViewStation FX/VS4000 4.2. Fixes for other products are scheduled for later release. Those affected by this issue should contact the vendor about obtaining fixes.

Polycom ViewStation ICMP Denial Of Service Vulnerability

References:

• Multiple Remote Vulnerabilities in Polycom Videoconferencing Products (Internet Security Systems )
  
• Polycom Worldwide Resource Center (Polycom)