{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Windows NT Server 4.0 Service Pack 6a ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows NT Server 4.0 Terminal Server Edition    Service Pack 6 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows 2000 Service Pack 3 et Microsoft Windows    2000 Service Pack 4 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP et Microsoft Windows XP Service Pack 1    ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP 64-Bit Edition Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows XP 64-Bit Edition Version 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Server 2003 64-Bit Edition ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows 98 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows 98 Second Edition ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Windows Millenium Edition.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eSur les syst\u00e8mes Microsoft Windows Server 2003, Microsoft  Windows 98, Microsoft Windows 98 Second Edition et Microsoft  Windows Millenium Edition, le service NetDDE n\u0027est pas activ\u00e9 par  d\u00e9faut.\u003c/P\u003e",
  "content": "## Description\n\nNetDDE (Network Dynamic Data Exchange) est un service qui permet \u00e0 des\napplications de communiquer entre elles \u00e0 travers un r\u00e9seau.  \n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire permet \u00e0 un utilisateur\ndistant mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire sur la machine.\n\n## Contournement provisoire\n\n-   D\u00e9sactiver le service NetDDE ;\n-   ou bloquer les ports suivants : 135/udp, 137/udp, 138/udp, 445/udp,\n    135/tcp, 139/tcp, 445/tcp, 593/tcp.\n\n## Solution\n\nAppliquer les correctifs fournis par Microsoft (cf. section\nDocumentation).\n",
  "cves": [],
  "initial_release_date": "2004-10-13T00:00:00",
  "last_revision_date": "2004-10-13T00:00:00",
  "links": [],
  "reference": "CERTA-2004-AVI-335",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-10-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 du service NetDDE permet \u00e0 un utilisateur distant mal\nintentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 du service Microsoft NetDDE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS04-031",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms04-031.mspx"
    }
  ]
}