{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Novell Client for Windows 2000/XP/2003 Support Pack 1a ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Novell",
          "scada": false
        }
      }
    },
    {
      "description": "Novell Client for Windows 2000/XP/2003 Support Pack 2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Novell",
          "scada": false
        }
      }
    },
    {
      "description": "Novell Client for Windows 2000/XP/2003 Support Pack 3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Novell",
          "scada": false
        }
      }
    },
    {
      "description": "Novell Client for Windows 2000/XP/2003 Support Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Novell",
          "scada": false
        }
      }
    },
    {
      "description": "Novell Client for Windows 2000/XP/2003 Support Pack 4.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Novell",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le client Novell Netware pour\nWindows. Celle-ci est due \u00e0 un manque de contr\u00f4le dans les param\u00e8tres\npass\u00e9s \u00e0 un appel syst\u00e8me du pilote NWFILTER.SYS int\u00e9gr\u00e9 \u00e0 ce client.\nElle permet \u00e0 un utilisateur local d\u0027ex\u00e9cuter du code arbitraire dans le\ncontexte du noyau du syst\u00e8me d\u0027exploitation.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2007-11-14T00:00:00",
  "last_revision_date": "2007-11-14T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 iDefense 626 du 12 novembre 2007 :",
      "url": "http://www.idefense.com/ntelligence/vulnerabilities/display.php?id=626"
    }
  ],
  "reference": "CERTA-2007-AVI-495",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-11-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le client Novell Netware pour Windows permet \u00e0 un\nutilisateur local d\u0027ex\u00e9cuter du code arbitraire et d\u0027\u00e9lever ses\nprivil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 du client Novell Netware pour Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Novell #3260263",
      "url": "http://secure-support.novell.com/KanisaPlatform/Publishing/98/3260263_f.SAL_Public.html"
    }
  ]
}