[SECURITY-L] Vulnerabilidades de seguranca

[Daniela Regina Barbetti Silva]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:


25/04/2002:
-----------
Red Hat, Inc. Red Hat Security Advisory (RHSA-2002:071-07)
Assunto: Updated sudo packages are available.
http://www.security.unicamp.br/docs/bugs/2002/04/v63.txt


26/04/2002:
-----------
Anúncio de segurança do Conectiva Linux (CLA-2002:475) 
Assunto: vulnerabilidade de buffer overflow no package "sudo".
http://www.security.unicamp.br/docs/bugs/2002/04/v62.txt

Anúncio de segurança do Conectiva Linux (CLA-2002:476) 
Assunto: vulnerabilidade de buffer overflow no package "webalizer".
http://www.security.unicamp.br/docs/bugs/2002/04/v64.txt

REVISED: Microsoft Security Bulletin (MS02-006)
Assunto: Unchecked Buffer in SNMP Service Could Enable Arbitrary 
Code to be Run.
http://www.security.unicamp.br/docs/bugs/2002/04/v65.txt

Caldera International, Inc. Security Advisory (CSSA-2002-018.0)
Assunto: Linux: Race condition in fileutils. 
http://www.security.unicamp.br/docs/bugs/2002/04/v69.txt

Red Hat, Inc. Red Hat Security Advisory (RHSA-2002:062-08)
Assunto: Insecure DocBook stylesheet option. 
http://www.security.unicamp.br/docs/bugs/2002/04/v75.txt


29/04/2002:
-----------
SuSE Security Announcement (SuSE-SA:2002:013)
Assunto: vulnerabilidade de seguranca no package radiusd-cistron.
http://www.security.unicamp.br/docs/bugs/2002/04/v66.txt

Trustix Secure Linux Security Advisory #2002-0046
Assunto: vulnerabilidade de seguranca no package "sudo".
http://www.security.unicamp.br/docs/bugs/2002/04/v67.txt

Trustix Secure Linux Security Advisory #2002-0047
Assunto: vulnerabilidade de seguranca no package "openssh".
http://www.security.unicamp.br/docs/bugs/2002/04/v68.txt

Caldera International, Inc. Security Advisory (CSSA-2002-019.0)
Assunto: Linux: imlib processes untrusted images. 
http://www.security.unicamp.br/docs/bugs/2002/04/v74.txt



30/04/2002:
-----------
SuSE Security Announcement (SuSE-SA:2002:014) 
Assunto: vulnerabilidade de seguranca no package "sudo".
http://www.security.unicamp.br/docs/bugs/2002/04/v70.txt

SGI Security Advisory (20020407-01-I)
Assunto: pmcd Denial of Service vulnerability. 
http://www.security.unicamp.br/docs/bugs/2002/04/v71.txt

SGI Security Advisory (20020408-01-I)
Assunto: /dev/ipfilter Denial of Service vulnerability.
http://www.security.unicamp.br/docs/bugs/2002/04/v72.txt

SGI Security Advisory (20020409-01-I)
Assunto: IRIX cpr vulnerability.
http://www.security.unicamp.br/docs/bugs/2002/04/v73.txt

Red Hat, Inc. Red Hat Security Advisory (RHSA-2002:064-12)
Assunto: Updated Nautilus for symlink vulnerability writing 
metadata files.
http://www.security.unicamp.br/docs/bugs/2002/04/v76.txt


--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
mailto:security em unicamp.br
http://www.security.unicamp.br