{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Microsoft Windows Server 2008 32-bit, x64 et \u00e0 base d'Itanium.","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Server 2003 Service Pack 1 et 2, y compris les syst\u00e8mes \u00e0 base d'Itanium ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Vista x64 Edition et Service Pack 1 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows Vista et Service Pack 1 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP Service Pack 2 et 3 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows XP professional x64 Edition et x64 Edition Service Pack 2 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}},{"description":"Microsoft Windows 2000 Service Pack 4 ;","product":{"name":"Windows","vendor":{"name":"Microsoft","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nUne vuln\u00e9rabili\u00e9 dans le composant d'authentification SChannel peut \u00eatre\nexploit\u00e9e par un utilisateur malintentionn\u00e9, ayant obtenu au pr\u00e9alable\nun certificat d'authentification, afin de se connecter \u00e0 un serveur\ndistant sans pour autant \u00eatre en possession de la cl\u00e9 priv\u00e9e associ\u00e9e.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 MS09-007 de Microsoft pour\nl'obtention des correctifs (cf. section Documentation).\n","cves":[{"name":"CVE-2009-0085","url":"https://www.cve.org/CVERecord?id=CVE-2009-0085"}],"links":[],"reference":"CERTA-2009-AVI-092","revisions":[{"description":"version initiale.","revision_date":"2009-03-10T00:00:00.000000"}],"risks":[{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"Une vuln\u00e9rabilit\u00e9 dans le composant d'authentification SChannel de\nMicrosoft Windows permet \u00e0 un utilisateur malveillant d'usurper une\nidentit\u00e9 afin de se connecter \u00e0 un serveur.\n","title":"Vuln\u00e9rabilit\u00e9 dans le composant d'authentification Secure Channel de Microsoft Windows","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Microsoft MS09-007 du 10 mars 2009","url":"http://www.microsoft.com/technet/security/Bulletin/MS09-007.mspx"}]}