{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Irix 6.5.5 et versions ant\u00e9rieures.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "UnixWare 7.1.1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "UnixWare 7.1.3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Open Unix 8.0.0 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de pile \u00e0 \u00e9t\u00e9 d\u00e9couverte sur la\ncommande ps.\n\nElle permet \u00e0 un utilisateur mal intentionn\u00e9 d\u0027ex\u00e9cuter du code\narbitraire avec les privil\u00e8ges du syst\u00e8me.\n\nCette vuln\u00e9rabilit\u00e9 n\u0027est exploitable qu\u0027en local.\n\n## Solution\n\nAppliquer le correctif correspondant \u00e0 votre syst\u00e8me (cf section\ndocumentation).\n",
  "cves": [],
  "links": [
    {
      "title": "Correctif pour Irix 6.5.x",
      "url": "http://support.sgi.com/irix/"
    },
    {
      "title": "Correctif pour UnixWare 7.1.1, OpenUNIX 8.0.0 et UnixWare    7.1.3",
      "url": "ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2003-SCO.1.1"
    }
  ],
  "reference": "CERTA-2003-AVI-033",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2003-02-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire en local"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Un d\u00e9bordement de pile pr\u00e9sent sur la commande ps permet \u00e0 un\nutilisateur local d\u0027ex\u00e9cuter un code arbitraire avec les privil\u00e8ges du\nsyst\u00e8me.\n",
  "title": "D\u00e9bordement de pile sur la commande ps",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis de s\u00e9curit\u00e9 CSSA-2003-SCO.1.1 de SCO Security",
      "url": "ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2003-SCO.1.1/CSSA-2003-SCO.1.1.txt"
    }
  ]
}