{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eHP OpenView Storage Data Protector  version 5.x\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans HP OpenView Storage Data\nProtector. Cette vuln\u00e9rabilit\u00e9, pr\u00e9sente au niveau du m\u00e9canisme\nd\u0027authentification des agents de sauvegarde, permet \u00e0 un utilisateur\nd\u0027envoyer des commandes arbitraire \u00e0 ces agents sans \u00eatre authentifi\u00e9.\n\nCette vuln\u00e9rabilit\u00e9 ne peut \u00eatre exploit\u00e9e, a priori, qu\u0027\u00e0 partir du\nr\u00e9seau interne.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2006-08-14T00:00:00",
  "last_revision_date": "2006-08-14T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02138  SSRT061184 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00742778"
    }
  ],
  "reference": "CERTA-2006-AVI-355",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-08-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant la prise de contr\u00f4le \u00e0 distance depuis le\nr\u00e9seau local a \u00e9t\u00e9 d\u00e9couverte dans les agents de sauvegarde de HP\nOpenView Storage Data Protector.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de HP OpenView Storage Data Protector 5.x",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02138 SSRT061184",
      "url": null
    }
  ]
}