{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco Okena StormWatch versions 3.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Security Agent versions 4.x jusqu\u0027\u00e0 la version 4.0.3 build 728 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Security Agent versions 3.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans le programme de protection des\nd\u00e9bordements de m\u00e9moire des agents de s\u00e9curit\u00e9 Cisco.\n\nCette vuln\u00e9rabilit\u00e9 peut \u00eatre exploit\u00e9e par un utilisateur mal\nintentionn\u00e9 via l\u0027exploitation r\u00e9p\u00e9t\u00e9e d\u0027un d\u00e9bordement de m\u00e9moire dans\nun faible intervale de temps.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2004-11-16T00:00:00",
  "last_revision_date": "2004-11-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco du 11 novembre 2004 :",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml"
    },
    {
      "title": "Site internet de Cisco :",
      "url": "http://www.cisco.com"
    }
  ],
  "reference": "CERTA-2004-AVI-367",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-11-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans les agents de s\u00e9curit\u00e9 Cisco Security\nAgent (CSA) permet \u00e0 un utilisateur mal intentionn\u00e9 de contourner les\nr\u00e8gles de s\u00e9curit\u00e9 impos\u00e9es par l\u0027agent.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Cisco Security Agent (CSA)",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 Cisco du 11 novembre 2004",
      "url": null
    }
  ]
}