{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "la s\u00e9rie des Nortel Switched Firewall 5100 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "la s\u00e9rie des Nortel Switched Firewall 6000.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "La s\u00e9rie des Nortel Switched Firewall 5000 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne erreur dans la mise en \u0153uvre de la premi\u00e8re phase du protocole\nd\u0027\u00e9change de clefs IKEv1 (Internet Key Exchange version 1) sur certains\n\u00e9quipements Nortel permet \u00e0 un utilisateur distant mal intentionn\u00e9 de\nprovoquer un d\u00e9ni de service par le biais d\u0027un message IKE\nmalicieusement construit.\n\n## Solution\n\n-   Site de l\u0027\u00e9diteur :\n\n        http://www.nortelnetworks.com\n\n-   Bulletin de s\u00e9curit\u00e9 Nortel NTD 2663 du 15 novembre 2005 :\n\n        http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=367651\n\n-   Bulletin de s\u00e9curit\u00e9 du NISCC du 14 novembre 2005 :\n\n        http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en\n",
  "cves": [],
  "initial_release_date": "2005-11-16T00:00:00",
  "last_revision_date": "2005-11-16T00:00:00",
  "links": [],
  "reference": "CERTA-2005-AVI-460",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-11-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans certains produits Nortel permet \u00e0 un utilisateur\ndistant mal intentionn\u00e9 de provoquer un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de certains \u00e9quipements Nortel",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Nortel NTD 2663 du 15 novembre 2005",
      "url": null
    }
  ]
}