« Volver al listado

CVE-2003-0556

Estado: ModificadaMedia (5)—

Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of "user" requests to the control port 5003, as demonstrated using the blast TCP stress tester.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Polycom — Mgc-100Polycom — Mgc-25Polycom — Mgc-50

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2003-0556",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2003-08-18T04:00:00.000",
  "references": [
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006494.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105804648003163&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006494.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=105804648003163&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Polycom MGC 25 allows remote attackers to cause a denial of service (crash) via a large number of \"user\" requests to the control port 5003, as demonstrated using the blast TCP stress tester."
    },
    {
      "lang": "es",
      "value": "Polycom MGC 25 permite a atacantes remotos causar una denegación de servicio (caída) mediante un número largo de peticiones \"user\" al puerto de control 5003, como se ha demostrado usando el probador de estrés blast TCP."
    }
  ],
  "lastModified": "2026-06-16T22:02:25.840",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:polycom:mgc-100:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A63CAFB2-850D-44B8-98E9-9C76D21C2F06"
            },
            {
              "criteria": "cpe:2.3:h:polycom:mgc-25:5.51.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4BC2C08-FDE4-4A56-9686-DF3EC0498815"
            },
            {
              "criteria": "cpe:2.3:h:polycom:mgc-25:5.51.211:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30493D86-030F-4DFD-8CA9-0AC1A1FE6386"
            },
            {
              "criteria": "cpe:2.3:h:polycom:mgc-50:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "780BE72A-038A-413E-8D79-7E80F731FCBE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}