{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sun Solaris 9.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Sun Solaris 8 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilt\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Sun Solaris.\n\nCette vuln\u00e9rabilit\u00e9 permet \u00e0 un utilisateur malveillant (disposant de\ncertains privil\u00e8ges) de d\u00e9couvrir les mots de passe du Directory Server\nrootDN par le biais de la fonction \u003cspan class=\"textbf\"\u003eidsconfig\u003c/span\u003e\nou des fonctions LDAP \u003cspan class=\"textbf\"\u003eldapadd\u003c/span\u003e, \u003cspan\nclass=\"textbf\"\u003eldapdelete\u003c/span\u003e, \u003cspan\nclass=\"textbf\"\u003eldapmodify\u003c/span\u003e, \u003cspan class=\"textbf\"\u003eldapmodrdn\u003c/span\u003e\net \u003cspan class=\"textbf\"\u003eldapsearch\u003c/span\u003e.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2006-04-13T00:00:00",
  "last_revision_date": "2006-04-13T00:00:00",
  "links": [],
  "reference": "CERTA-2006-AVI-154",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-04-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le client LDAP de suns solaris\npermettant un contournement de la politique de s\u00e9curit\u00e9 locale.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de LDAP2 sous Sun Solaris",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Sun",
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1"
    }
  ]
}