{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Nortel Centrex IP CLient Manager 7.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Nortel Centrex IP CLient Manager 2.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Nortel Centrex IP CLient Manager 8.0.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nNortel vient de publier son bulletin de s\u00e9curit\u00e9 en r\u00e9ponse aux\nbulletins de s\u00e9curit\u00e9 de Microsoft du mois d\u0027octobre.\n\nCes vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9crites dans les bulletins de s\u00e9curit\u00e9 du\nCERTA du 12 octobre 2005 :\n\n-   CERTA-2005-AVI-406 ;\n-   CERTA-2005-AVI-403 ;\n-   CERTA-2005-AVI-401 ;\n-   CERTA-2005-AVI-399 ;\n-   CERTA-2005-AVI-398 ;\n-   CERTA-2005-AVI-397 ;\n-   CERTA-2005-AVI-396 ;\n-   CERTA-2005-AVI-395 ;\n-   CERTA-2005-AVI-394.\n\n## Contournement provisoire\n\n-   Filtrer le trafic r\u00e9seau \u00e0 destination du syst\u00e8me vuln\u00e9rable ;\n-   ne pas naviguer sur des sites non s\u00fbrs.\n\n## Solution\n\nLes mises \u00e0 jours de s\u00e9curit\u00e9 seront disponibles lors de la prochaine\npublication de maintenance pour Centrex IP CLient Manager 2.5, 7.0 et\n8.0.\n",
  "cves": [],
  "initial_release_date": "2005-10-19T00:00:00",
  "last_revision_date": "2005-10-19T00:00:00",
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 du CERTA :",
      "url": "http://www.certa.ssi.gouv.fr/site/index.html#avis"
    },
    {
      "title": "Site Internet de l\u0027\u00e9diteur :",
      "url": "http://www.nortelnetworks.com/"
    }
  ],
  "reference": "CERTA-2005-AVI-412",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-10-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Nortel Centrex IP CLient Manager",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Nortel #361442 du 14 octobre 2005",
      "url": "http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=361442\u0026RenditionID="
    }
  ]
}