{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Novell eDirectory 8.8 SP2 ;","product":{"name":"N/A","vendor":{"name":"Novell","scada":false}}},{"description":"Novell eDirectory 8.8 pour toute plate-forme.","product":{"name":"N/A","vendor":{"name":"Novell","scada":false}}},{"description":"Novell eDirectory 8.8 SP1 ;","product":{"name":"N/A","vendor":{"name":"Novell","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nDe multiples vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans Novell eDirectory. Elles\nsont relatives \u00e0 diff\u00e9rents composants du syst\u00e8me comme les services\nLDAP, NDS, HTTP ou la pile protocolaire HTTP. Celles relatives aux\nservices permettent toutes de provoquer un d\u00e9ni de service ou d'\u00e9x\u00e9cuter\ndu code arbitraire \u00e0 distance tandis que celle concernant la pile\nprotocolaire HTTP permet de porter atteinte \u00e0 la confidentialit\u00e9 de\ncertaines donn\u00e9es.\n\n## Solution\n\nLa version 8.8 SP3 de Novell eDirectory corrige ces probl\u00e8mes. Se\nr\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[],"links":[],"reference":"CERTA-2008-AVI-442","revisions":[{"description":"version initiale.","revision_date":"2008-09-04T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"Plusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans Novell eDirectory permettent \u00e0\nun utilisateur distant de provoquer un d\u00e9ni de service ou d'ex\u00e9cuter du\ncode arbitraire.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Novell eDirectory","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Novell #3426981","url":"http://www.novell.com/support/viewContent.do?externalId=3426981"}]}