{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PostgreSQL 8.0.x.",
      "product": {
        "name": "PostgreSQL",
        "vendor": {
          "name": "PostgreSQL",
          "scada": false
        }
      }
    },
    {
      "description": "PostgreSQL 8.1.x ;",
      "product": {
        "name": "PostgreSQL",
        "vendor": {
          "name": "PostgreSQL",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPostgreSQL est un outil de base de donn\u00e9es Open Source.\n\nDeux vuln\u00e9rabilit\u00e9s dans PostgreSQL permettent \u00e0 un utilisateur mal\nintentionn\u00e9 de r\u00e9aliser un d\u00e9ni de service \u00e0 distance ou porter atteinte\n\u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n\n## Solution\n\nAppliquer les mises \u00e0 jour de s\u00e9curit\u00e9 en passant \u00e0 la version 8.1.2 ou\n\u00e0 la version 8.0.6 de PostgreSQL.\n\nCes correctifs sont disponibles \u00e0 l\u0027adresse suivante :\n\n    http://www.postgresql.org/download/\n",
  "cves": [],
  "initial_release_date": "2006-01-10T00:00:00",
  "last_revision_date": "2006-01-10T00:00:00",
  "links": [
    {
      "title": "PostgreSQL version 8.1.2 et 8.0.6 sont disponibles \u00e0    l\u0027adresse suivante :",
      "url": "http://www.postgresql.org/download/"
    }
  ],
  "reference": "CERTA-2006-AVI-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-01-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans postgreSQL",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PostgreSQL du 06 janvier 2006",
      "url": "http://www.postgresql.org/about/news.456"
    }
  ]
}