{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Serveur Telnet sous Microsoft Windows 2000 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Service Telnet sous Microsoft Interix 2.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne mauvaise gestion de la m\u00e9moire du serveur Telnet peut permettre\nd\u0027ex\u00e9cuter \u00e0 distance, par le biais de requ\u00eates judicieusement\ncompos\u00e9es, du code arbitraire (avec les droits system sous Windows 2000)\nou entra\u00eener un d\u00e9ni de service.\n\nSous Windows 2000, le serveur Telnet est install\u00e9 par d\u00e9faut mais non\nlanc\u00e9.  \n  \n\n## Solution\n\nT\u00e9l\u00e9charger le correctif sur le site Microsoft :\n\n-   Windows 2000 :\n\n        http://www.microsoft.com/windows2000/downloads/security/q307298/default.asp\n\n-   Interix 2.2 :\n\n        http://www.microsoft.com/downloads/release.asp?ReleaseID=35969\n",
  "cves": [],
  "initial_release_date": "2002-02-08T00:00:00",
  "last_revision_date": "2002-02-08T00:00:00",
  "links": [
    {
      "title": "Bulletin Microsoft :",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-004.asp"
    }
  ],
  "reference": "CERTA-2002-AVI-025",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-02-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Un utilisateur distant mal intentionn\u00e9 peut, en provoquant un\nd\u00e9bordement de m\u00e9moire dans le serveur Telnet, ex\u00e9cuter du code\narbitraire ou entra\u00eener un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le serveur Telnet Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin Microsoft MS02-004",
      "url": null
    }
  ]
}