{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco IOS R12.x ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.x ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 15000 series.",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLe protocole DHCP (Dynamic Host Configuration Protocol) est un protocole\nqui permet \u00e0 un syst\u00e8me d\u0027obtenir une configuration dynamique.\n\nUne vuln\u00e9rabilit\u00e9 pr\u00e9sente dans le traitement des paquets DHCP permet \u00e0\nune personne mal intentionn\u00e9e, connect\u00e9e au r\u00e9seau local, d\u0027arr\u00eater le\ntrafic \u00e0 destination du routeur, via l\u0027envoi d\u0027un paquet DHCP\nmalicieusement construit.\n\nLes \u00e9quipements Cisco (routeurs et commutateurs) suivants utilisent une\nversion vuln\u00e9rable de Cisco IOS :\n\n-   Cisco 7200, 7300, 7500 platforms ;\n-   Cisco 2650, 2651, 2650XM, 2651XM Multiservice platform ;\n-   Cisco ONS15530, ONS15540 ;\n-   Cisco Catalyst 4000, Sup2plus, Sup3, Sup4 and Sup5 modules ;\n-   Cisco Catalyst 4500, Sup2Plus TS ;\n-   Cisco Catalyst 4948, 2970, 3560, and 3750 ;\n-   Cisco Catalyst 6000, Sup2/MSFC2 and Sup720/MSFC3 ;\n-   Cisco 7600 Sup2/MSFC2 and Sup720/MSFC3.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-11-12T00:00:00",
  "last_revision_date": "2004-11-12T00:00:00",
  "links": [],
  "reference": "CERTA-2004-AVI-366",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le traitement des paquets DHCP (Dynamic Host\nConfiguration Protocol) par Cisco IOS permet \u00e0 une personne mal\nintentionn\u00e9e, ayant acc\u00e8s au r\u00e9seau local, de r\u00e9aliser un d\u00e9ni de\nservice sur l\u0027\u00e9quipement vuln\u00e9rable.\n",
  "title": "Vuln\u00e9rabilit\u00e9 sur Cisco IOS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco 63312 du 10 novembre 2004",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml"
    }
  ]
}