{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Internet Information Server 5.1.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Internet Information Server 4.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Internet Information Server 5.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 mises en \u00e9vidence dans plusieurs\nversions de Microsoft Internet Information Server, permettant \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire, d\u0027effectuer\ndes d\u00e9nis de service ou bien d\u0027exploiter des vuln\u00e9rabilit\u00e9s de type\n\"Cross Site Scripting\".  \nLes produits Cisco install\u00e9s sur une plateforme Windows avec un serveur\nIIS peuvent \u00eatre affect\u00e9s si aucun correctif n\u0027a \u00e9t\u00e9 appliqu\u00e9 (se\nr\u00e9f\u00e9rer au bulletin de Cisco afin de conna\u00eetre la liste des produits\naffect\u00e9s).\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Microsoft (section Patch\navailability) afin d\u0027obtenir la liste des correctifs selon les versions\naffect\u00e9es :\n\n    http://www.microsoft.com/technet/security/bulletin/MS02-018.asp\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 CISCO \"Microsoft IIS Vulnerability in    Cisco Products - MS02-018\" :",
      "url": "http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml"
    }
  ],
  "reference": "CERTA-2002-AVI-075",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-04-11T00:00:00.000000"
    },
    {
      "description": "ajout de l\u0027avis Cisco.",
      "revision_date": "2002-04-17T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Vuln\u00e9rabilit\u00e9 de type \"cross site scripting\" (cf. bulletin d\u0027information certa-2002-inf-001)"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 mises en \u00e9vidence dans le serveur web\nde Microsoft Internet Information Server (IIS).\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft IIS",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS02-018 de Microsoft",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-018.asp"
    }
  ]
}