{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eToutes les versions de \u003cTT\u003eHylaFAX\u003c/TT\u003e  ant\u00e9rieures \u00e0 la version 4.1.3.\u003c/p\u003e",
  "content": "## Description\n\nHylaFAX, organis\u00e9 autour d\u0027une architecture client-serveur, permet\nl\u0027envoi et la reception de fax. Plusieurs utilitaires du paquetage\nposs\u00e8dent des vuln\u00e9rabilit\u00e9s de type d\u00e9bordement de m\u00e9moire permettant\nl\u0027ex\u00e9cution de code arbitraire : faxgetty, faxrm, faxalter, faxstat,\nfaxwatch, sendfax, sendpage.\n\n## Solution\n\nInstaller HylaFAX version 4.1.3 (cf. section documentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Avis de s\u00e9curit\u00e9 de Mandrake Linux  MDKSA-2002:055 :",
      "url": "http://www.linux-mandrake.com/en/updates/2002/MDKSA-2002-055.php"
    }
  ],
  "reference": "CERTA-2002-AVI-196",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-08-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s dans le paquetage HylaFAX permettent \u00e0 un\nutilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilite de HylaFAX",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de securit\u00e9 de Mandrake",
      "url": null
    }
  ]
}