CVE-2003-0556: Medium severity Polycom Mgc-100 vulnerability
Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0556?
CVE-2003-0556 has a high severity rating due to its ability to cause a denial of service.
How do I fix CVE-2003-0556?
To fix CVE-2003-0556, it is recommended to apply any patches issued by Polycom or limit access to the control port 5003.
Which devices are affected by CVE-2003-0556?
CVE-2003-0556 affects Polycom MGC 25 and potentially other models including MGC 50 and MGC 100.
What type of attack does CVE-2003-0556 enable?
CVE-2003-0556 enables a remote attacker to conduct a denial of service attack by overwhelming the control port with user requests.
Is there a workaround for CVE-2003-0556?
A possible workaround for CVE-2003-0556 includes configuring firewall rules to restrict access to the vulnerable control port.