Bad Password Lockout

[SNJQuintin]

On a 3300 PBX, release level 7.2, with embedded VM, I have set the lockout to 15 minutes. I'm thinking that an attacker would give up, and move on...I have found though, that there is a security hole. If I enter my password in wrong 3 times, I can continue to try, and it will continue to say that my password is bad, until I type in the right one...then it tells my that my voicemail box is locked...now the attacker knows the correct password...

Am I missing something here? Is there a newer release that fixes this hole?

Thanks,

Quintin