{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco IOS 12.0 ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.3 ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.1 ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.2 ;",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS 12.4.",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne erreur dans la mise en \u0153uvre des timers internes des IOS Cisco\npermet d\u0027ex\u00e9cuter du code arbitraire pr\u00e9c\u00e9dement inject\u00e9 en m\u00e9moire par\nune attaque de type d\u00e9bordement de tas (heap overflow). Ceci permet \u00e0 un\nutilisateur distant mal intentionn\u00e9 de provoquer un d\u00e9ni de service ou\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance en exploitant cette\nvuln\u00e9rabilit\u00e9 combin\u00e9e \u00e0 une autre de type heap overflow comme celle\nd\u00e9crite dans l\u0027avis CERTA-2005-AVI-309 sur la pile IPv6 des \u00e9quipements\nCisco.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Cisco pour appliquer le correctif\nappropri\u00e9 (cf. Documentation).\n",
  "cves": [],
  "initial_release_date": "2005-11-03T00:00:00",
  "last_revision_date": "2005-11-03T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco #20051102-timers du 02 novembre    2005 :",
      "url": "http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml"
    },
    {
      "title": "Site de l\u0027\u00e9diteur :",
      "url": "http://www.cisco.com"
    },
    {
      "title": "Avis CERTA-2005-AVI-309 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2005-AVI-309/CERTA-2005-AVI-309.html"
    }
  ],
  "reference": "CERTA-2005-AVI-431",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-11-03T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans les produits Cisco \u00e9quip\u00e9s d\u0027un IOS (Internal\nOperating System) permet \u00e0 un utilisateur distant de provoquer un d\u00e9ni\nde service ou d\u0027ex\u00e9cuter du code arbitraire.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco #20051102-timers du 02 novembre 2005",
      "url": null
    }
  ]
}