{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Symantec Gateway Security 2.0 - 5400 Series.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Enterprise Firewall 8.0 (Windows et Solaris) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec VelociRaptor 1.5 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Enterprise Firewall 7.0.x (Windows et Solaris) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "Symantec Gateway Security 1.0 - 5300 Series ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLa biblioth\u00e8que Entrust LibKmp ISAKMP g\u00e8re l\u0027\u00e9change des cl\u00e9s IKE et le\ntraitement des paquets ISAKMP. Elle est utilis\u00e9e par divers produits de\ns\u00e9curit\u00e9 de Symantec.\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de m\u00e9moire affectant cette\nbiblioth\u00e8que permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance ou la\nr\u00e9alisation d\u0027un d\u00e9ni de service.\n\nCette vuln\u00e9rabilit\u00e9 n\u0027affecte pas les passerelles qui n\u0027utilisent que\ndes tunnels VPN statiques ou qui n\u0027ont pas de tunnels VPN dynamiques\nd\u00e9finis.\n\n## Solution\n\nAppliquer le correctif fourni par Symantec :\n\n    http://www.symantec.com/region/fr/downloads\n",
  "cves": [],
  "initial_release_date": "2004-08-30T00:00:00",
  "last_revision_date": "2004-08-30T00:00:00",
  "links": [],
  "reference": "CERTA-2004-AVI-280",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-08-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "D\u00e9ni de service"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans divers produits Symantec permet l\u0027ex\u00e9cution de\ncode arbitraire \u00e0 distance, ou la r\u00e9alisation d\u0027un d\u00e9ni de service.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans divers produits Symantec",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SYM04-012 de Symantec du 26 ao\u00fbt 2004",
      "url": "http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html"
    }
  ]
}