{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"RealSecure Network Sensor 6.5.","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealSecure Network Sensor 6.0 ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}},{"description":"RealSecure Network Sensor 5.x ;","product":{"name":"N/A","vendor":{"name":"N/A","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nRealSecure Network Sensor est un syst\u00e8me de d\u00e9tection d'intrusions.\n\nUne vuln\u00e9rabilit\u00e9 pr\u00e9sente dans le traitement de certaines requ\u00eates DHCP\npeut entra\u00eener l'arr\u00eat intempestif de RealSecure Network Sensor.\n\nCette vuln\u00e9rabilit\u00e9 est exploitable \u00e0 distance.\n\n## Contournement provisoire\n\nD\u00e9sactiver les signatures DHCP_ACK, DHCP_Discover et DHCP_Request dans\nla configuration de RealSecure Network Sensor.\n\n## Solution\n\nAppliquer la mise \u00e0 jour RealSecure X-Press Update 4.3 (se r\u00e9f\u00e9rer \u00e0 la\nsection documentation).\n","cves":[],"links":[{"title":"Site Internet de ISS :","url":"http://www.iss.net/"}],"reference":"CERTA-2002-AVI-094","revisions":[{"description":"version initiale.","revision_date":"2002-05-02T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service"}],"summary":"Un utilisateur mal intentionn\u00e9 peut r\u00e9aliser un d\u00e9ni de service sur\nRealSecure Network Sensor de ISS (Internet Security Systems) par le\nbiais de paquets malicieusement construits.\n","title":"Vuln\u00e9rabilit\u00e9 sur RealSecure Network Sensor","vendor_advisories":[{"published_at":null,"title":"Liste de diffusion Bugtraq","url":null}]}