{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "VERITAS NetBackup Enterprise/Server/Client versions 5.0, 5.1, 6.0 (toutes versions et platefromes).",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "VERITAS NetBackup Data et Business Center versions 4.5 FP et 4.5 MP (toutes versions et plateformes) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans VERITAS NetBackup client et\nserveur. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 par le biais d\u0027une\ncommande sp\u00e9cialement construite \u00e0 destination du port 13722/tcp conduit\n\u00e0 l\u0027ex\u00e9cution de code arbitraire \u00e0 distance avec des privil\u00e8ges \u00e9lev\u00e9s\n(root ou system)\n\n## Solution\n\nSe reporter au bulletin de l\u0027\u00e9diteur pour l\u0027obtention des correctifs\n(cf. Documentation)\n",
  "cves": [],
  "initial_release_date": "2005-10-13T00:00:00",
  "last_revision_date": "2005-10-13T00:00:00",
  "links": [],
  "reference": "CERTA-2005-AVI-404",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-10-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance avec les privil\u00e8ges administrateur ou syst\u00e8me"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 dans VERITAS NetBackup",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 VERITAS",
      "url": "http://seer.support.veritas.com/docs/279085.htm"
    }
  ]
}