{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cTT\u003eOpenSLP\u003c/TT\u003e versions 1.x  ant\u00e9rieures \u00e0 la version 1.2.1.",
  "content": "## Description\n\nPlusieurs d\u00e9bordements de m\u00e9moire ont \u00e9t\u00e9 d\u00e9couverts dans OpenSLP. Un\nutilisateur mal intentionn\u00e9 peut, via des paquets SLP (Service Location\nProtocol) malicieusement construits, r\u00e9aliser un d\u00e9ni de service ou\nex\u00e9cuter du code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documention).\n",
  "cves": [],
  "initial_release_date": "2005-03-15T00:00:00",
  "last_revision_date": "2005-03-24T00:00:00",
  "links": [
    {
      "title": "Site de SUSE :",
      "url": "http://www.suse.com"
    },
    {
      "title": "Mise \u00e0 jour en version 1.2.1 :",
      "url": "http://sourceforge.net/project/showfiles.php?group_id=1730"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandrake MDKSA-2005:055 du 15 mars    2005 :",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:055"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200503-25 du 20 mars 2005    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200503-25.xml"
    }
  ],
  "reference": "CERTA-2005-AVI-117",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-03-15T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 de Mandrake.",
      "revision_date": "2005-03-17T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 de Gentoo.",
      "revision_date": "2005-03-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans OpenSLP peuvent \u00eatre exploit\u00e9es\npar un utilisateur mal intentionn\u00e9 pour r\u00e9aliser un d\u00e9ni de service ou\nex\u00e9cuter du code arbitraire \u00e0 distance sur un syst\u00e8me vuln\u00e9rable.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans OpenSLP",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SUSE",
      "url": "http://www.novell.com/linux/security/advisories/2005_15_openslp.html"
    }
  ]
}