CVE-2002-0670

2002-07-23T00:00:00
ID CVE-2002-0670
Type cve
Reporter NVD
Modified 2008-09-05T16:28:38

Description

The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing.