{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sun Java System Web Server.",
      "product": {
        "name": "Web",
        "vendor": {
          "name": "Centreon",
          "scada": false
        }
      }
    },
    {
      "description": "Sun ONE Directory Server ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Java System Directory Server ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\n-   Une vuln\u00e9rabilit\u00e9 pr\u00e9sente dans le serveur LDAP (LDAP est un\n    protocole d\u0027annuaire standard) permet \u00e0 un utilisateur mal\n    intentionn\u00e9, local ou distant d\u0027ex\u00e9cuter du code arbitraire ou de\n    forcer l\u0027arret du processus LDAP ;\n-   une seconde vuln\u00e9rabilit\u00e9 d\u00e9couverte dans certaines publications de\n    Sun Java System Web Server permet \u00e0 un individu mal intentionn\u00e9\n    d\u0027effectuer un d\u00e9ni de service.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-04-15T00:00:00",
  "last_revision_date": "2005-04-15T00:00:00",
  "links": [],
  "reference": "CERTA-2005-AVI-145",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-04-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Deux vuln\u00e9rabilit\u00e9s affectant des produits de Sun permettent \u00e0 un\nutilisateur mal intentionn\u00e9, local ou distant d\u0027ex\u00e9cuter du code\narbitraire ou effectuer un d\u00e9ni de service.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de la machine virtuelle Java de SUN",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #57754 du 13 avril 2005",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun #57760 du 13 avril 2005",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-57760-1"
    }
  ]
}