The Web server for Polycom ViewStation before 7.2.4 allows remote attackers to bypass authentication and read files via Unicode encoded requests.Referenceshttp://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21089http://www.polycom.com/common/pw_item_show_doc/0%2C%2C1444%2C00.pdfhttp://www.ciac.org/ciac/bulletins/m-123.shtmlhttp://www.iss.net/security_center/static/9348.phphttp://www.securityfocus.com/bid/5632