{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "ProFTPD 1.2.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "ProFTPD 1.3.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nProFTPD est un serveur ftp.\n\nDeux vuln\u00e9rabilit\u00e9s de type chaine de format dans ProFTPD permettent \u00e0\nun utlisateur distant mal intententionn\u00e9 de porter atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es, de r\u00e9aliser un d\u00e9ni de service ou\nd\u0027ex\u00e9cuter du code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-07-27T00:00:00",
  "last_revision_date": "2005-09-05T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 ProFTPD du 24 juillet 2005 :",
      "url": "http://www.proftpd.org/docs/RELEASE_NOTES-1.3.0rc2"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200508-02 du 01 ao\u00fbt 2005    :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200508-02.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA-795-2 du 01 septembre 2005    :",
      "url": "http://www.debian.org/security/2005/dsa-795"
    },
    {
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 ProFTP 1.3.0rc2 :",
      "url": "http://www.proftpd.org/download.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:140 :",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:140"
    }
  ],
  "reference": "CERTA-2005-AVI-282",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-07-27T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200508-02 et \u00e0 la r\u00e9f\u00e9rence CVE CAN-2005-2390.",
      "revision_date": "2005-08-02T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Mandriva.",
      "revision_date": "2005-08-17T00:00:00.000000"
    },
    {
      "description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Debian DSA-795-2.",
      "revision_date": "2005-09-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans ProFTPD",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Mise \u00e0 jour de s\u00e9curit\u00e9 ProFTPD du 24 juillet 2005",
      "url": null
    }
  ]
}