{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eHP-UX B11.00, B11.11, B11.22, B11.23.\u003c/p\u003e",
  "content": "## Description\n\nSelon HP, deux vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans le serveur de polices de\ncaract\u00e8res xfs et dans la commande stmkfont permettent \u00e0 un utilisateur\nmal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire avec les privil\u00e8ges du\ngroupe bin.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs.\n",
  "cves": [],
  "initial_release_date": "2004-07-27T00:00:00",
  "last_revision_date": "2004-07-27T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HPSBUX01061 \"HP-UX xfs  and stmkfont remote unauthorized access\" :",
      "url": "http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01061"
    }
  ],
  "reference": "CERTA-2004-AVI-254",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-07-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": null,
  "title": "Multiples vuln\u00e9rabilit\u00e9s sous HP-UX",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 HPSBUX01061 de HP",
      "url": null
    }
  ]
}