{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eOpenSSH versions ant\u00e9rieures \u00e0 3.4p1.\u003c/P\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans l\u0027utilitaire SCP d\u0027OpenSSH. Cette\nvuln\u00e9rabilit\u00e9 peut \u00eatre employ\u00e9e par un utilisateur mal intentionn\u00e9 afin\nd\u0027\u00e9craser des fichiers existants sur le syst\u00e8me client, lors de\nl\u0027utilisation de SCP sur un serveur OpenSSH malicieux.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-09-09T00:00:00",
  "last_revision_date": "2005-08-31T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:165 du 06 juin 2005    :",
      "url": "https://rhn.redhat.com/errata/RHSA-2005-165.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:106 du 18 mai 2005 :",
      "url": "https://rhn.redhat.com/errata/RHSA-2005-106.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 #59739 de Juniper Networks NetScreen :",
      "url": "http://www.juniper.net/support/security/alerts/adv59739.txt"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Avaya ASA-2005-167 du 29 ao\u00fbt 2005 :",
      "url": "http://suppport.avaya.com/elmodocs2/security/ASA-2005-167.pdf"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MAC OS X du 07 Septembre 2004 :",
      "url": "http://docs.info.apple.com/article.html?artnum=61798"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:100 du 14 juin    2005 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:100"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2005:495 du 13 juin 2005    :",
      "url": "https://rhn.redhat.com/errata/RHSA-2005-495.html"
    }
  ],
  "reference": "CERTA-2004-AVI-308",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-09-09T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rences aux bulletins RHSA-2005-106 et RHSA-2005-165 de Red Hat.",
      "revision_date": "2005-06-09T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 RHSA-2005-495 de Red Hat et MDKSA-2005:100 de Mandriva.",
      "revision_date": "2005-06-15T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 ASA-2005-167 de Avaya.",
      "revision_date": "2005-08-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 dans OpenSSH",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE du 14 Avril 2004",
      "url": "http://www.suse.de/de/security/2004_09_kernel.html"
    }
  ]
}