{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sybase EAServer version 5.1 (Windows, Solaris, IBM AIX) ;",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sybase EAServer version 5.0 (Windows, Linux, Solaris, IBM AIX, HP-UX PA RISC, HP-UX Itanium) ;",
      "product": {
        "name": "AIX",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sybase EAServer version 4.2.5 (Windows et Solaris).",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Sybase EAServer version 5.2 (Windows, Linux, Solaris, HP-UX PA RISC) ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans Sybase EAServer.  \n\nCette vuln\u00e9rabilit\u00e9 pourrait \u00eatre exploit\u00e9e par un utilisateur mal\nintentionn\u00e9 distant afin de compromettre le syst\u00e8me en ex\u00e9cutant du code\narbitraire \u00e0 distance. Le code s\u0027ex\u00e9cutera alors avec les droits\ninh\u00e9rents au processus jagsrv.exe.  \n\nPour que l\u0027exploitation soit r\u00e9ussie, l\u0027attaquant doit au pr\u00e9alable\ns\u0027authentifier sur la page d\u0027administration /Webconsole/.\n\n## Solution\n\nAppliquer le correctif de Sybase (voir tableau sur le lien suivant) :\n\n    http://www.sybase.com/detail?id=1036742\n",
  "cves": [],
  "initial_release_date": "2005-07-18T00:00:00",
  "last_revision_date": "2005-07-18T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Sybase:",
      "url": "http://www.sybase.com/detail?id=1036742"
    }
  ],
  "reference": "CERTA-2005-AVI-269",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-07-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 de Sybase EAServer",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sybase du 11 juillet 2005",
      "url": null
    }
  ]
}