{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Oracle 9iAS Release 1.0.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    },
    {
      "description": "tous les produits Oracle incluant Oracle Reports Server versions 6.0.8.18.0 et ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Oracle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nOracle Reports Server met en oeuvre un programme de type CGI vuln\u00e9rable\n\u00e0 un d\u00e9bordement de m\u00e9moire. Cette vuln\u00e9rabilit\u00e9 peut \u00eatre exploit\u00e9e par\nun individu mal intentionn\u00e9 afin d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance avec les privil\u00e8ges du compte du serveur web.\n\n## Solution\n\nAppliquer le correctif fourni par Oracle :\n\n    http://metalink.oracle.com\n",
  "cves": [],
  "initial_release_date": "2002-06-13T00:00:00",
  "last_revision_date": "2002-06-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curite #35 de Oracle :",
      "url": "http://otn.oracle.com/deploy/security/pdf/reports6i_alert.pdf"
    }
  ],
  "reference": "CERTA-2002-AVI-126",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-06-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Oracle Reports Server 6i.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Oracle 9iAS Reports Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de securite #35 de Oracle",
      "url": null
    }
  ]
}