{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "OpenOffice 1.1.2.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "OpenOffice",
          "scada": false
        }
      }
    },
    {
      "description": "StarOffice 7 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "OpenOffice",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nOpenOffice et StarOffice sont deux suites bureautiques.\n\nOpenOffice et StarOffice ne g\u00e8rent pas correctement les droits d\u0027acc\u00e8s\nlors de la cr\u00e9ation des fichiers temporaires. Un utilisateur mal\nintentionn\u00e9 peut exploiter cette vuln\u00e9rabilit\u00e9 pour acc\u00e9der aux donn\u00e9es\nd\u0027un tiers.\n\n## Contournement provisoire\n\nPositionner la variable d\u0027environnement \\$UMASK permettant de\npositionner le droits d\u0027acc\u00e8s par d\u00e9faut ou positionner les variables\nd\u0027environnement \\$TMPDIR vers un r\u00e9pertoire fils du r\u00e9pertoire \\$HOME de\nl\u0027utilisateur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux diff\u00e9rents bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour\nl\u0027obtention des correctifs (cf. section documentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200410-17 du 20 octobre    2004 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200410-17.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2004:446 du 15 septembre    2004 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2004-446.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandrake MDKSA-2004:103 du 27    septembre 2004 :",
      "url": "http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:103"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Secunia SA12302 du 13 septembre 2004 :",
      "url": "http://secunia.com/advisories/12302"
    },
    {
      "title": "Correctif pour StarOffice (Linux) :",
      "url": "http://sunsolve.sun.com/search/advsearch.do?collection=PATCH\u0026type=collections\u0026max=50\u0026language=en\u0026queryKey5=116518\u0026toDocument=yes"
    },
    {
      "title": "Site d\u0027OpenOffice :",
      "url": "http://www.openoffice.org"
    },
    {
      "title": "Correctif pour StarOffice (Solaris/x86) :",
      "url": "http://sunsolve.sun.com/search/advsearch.do?collection=PATCH\u0026type=collections\u0026max=50\u0026language=en\u0026queryKey5=117073\u0026toDocument=yes"
    },
    {
      "title": "Correctif pour StarOffice (Solaris/sparc) :",
      "url": "http://sunsolve.sun.com/search/advsearch.do?collection=PATCH\u0026type=collections\u0026max=50\u0026language=en\u0026queryKey5=116519\u0026toDocument=yes"
    }
  ],
  "reference": "CERTA-2004-AVI-318",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2004-09-16T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 de Mandrake.",
      "revision_date": "2004-09-29T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 de Gentoo.",
      "revision_date": "2004-10-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 d\u0027OpenOffice et StarOffice",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SA12302 de Secunia",
      "url": null
    }
  ]
}