{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SonicWALL SSL-VPN 2000 versions ant\u00e9rieures \u00e0 la version 3.5.0.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sonicwall",
          "scada": false
        }
      }
    },
    {
      "description": "SonicWALL SSL-VPN 4000 versions ant\u00e9rieures \u00e0 la version 3.5.0.5.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sonicwall",
          "scada": false
        }
      }
    },
    {
      "description": "SonicWALL SSL-VPN 200 versions ant\u00e9rieures \u00e0 la version 3.0.0.9 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Sonicwall",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans SonicWALL SSL-VPN. Cette\nvuln\u00e9rabilit\u00e9 est due \u00e0 une erreur dans le traitement des cha\u00eenes de\nformat. L\u0027exploitation de cette vuln\u00e9rabilit\u00e9 permet \u00e0 une personne\ndistante malintentionn\u00e9e de r\u00e9cup\u00e9rer des donn\u00e9es sensibles, de r\u00e9aliser\nun d\u00e9ni de service ou d\u0027ex\u00e9cuter du code arbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2009-06-10T00:00:00",
  "last_revision_date": "2009-06-10T00:00:00",
  "links": [
    {
      "title": "Site de l\u0027\u00e9diteur permettant d\u0027obtenir les mises \u00e0 jour de    micrologiciel (firmware):",
      "url": "http://www.mysonicwall.com"
    }
  ],
  "reference": "CERTA-2009-AVI-226",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2009-06-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant de r\u00e9aliser, entre autre, une ex\u00e9cution de\ncode arbitraire \u00e0 distance a \u00e9t\u00e9 d\u00e9couverte dans SonicWALL SSL-VPN.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans SonicWALL SSL-VPN",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Note de mise \u00e0 jour SonicWALL pour les versions 3.0.0.9 et 3.5.0.5",
      "url": null
    }
  ]
}