[SECURITY-L] Vulnerabilidades de Seguranca

[Silvana Mieko Misuta]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:


31/03/2003
----------


Red Hat Security Advisory (RHSA-2003:034-01)
Assunto: Updated dhcp packages fix possible packet storm
http://www.security.unicamp.br/docs/bugs/2003/03/v131.txt    


Red Hat Security Advisory (RHSA-2003:120-01)
Assunto: Updated sendmail packages fix vulnerability
http://www.security.unicamp.br/docs/bugs/2003/03/v130.txt    


Gentoo Linux Security Announcement (200303-29)
Assunto: integer overflow in dietlibc
http://www.security.unicamp.br/docs/bugs/2003/03/v129.txt    


Gentoo Linux Security Announcement (200303-28)
Assunto: multiple vulnerabilities fixed in krb5 & mit-krb5
http://www.security.unicamp.br/docs/bugs/2003/03/v128.txt    


Gentoo Linux Security Announcement (200303-27)
Assunto: buffer overflow in sendmail
http://www.security.unicamp.br/docs/bugs/2003/03/v127.txt    



30/03/2003
----------

FreeBSD Security Advisory (FreeBSD-SA-03:07)
Assunto: a second sendmail header parsing buffer overflow
http://www.security.unicamp.br/docs/bugs/2003/03/v126.txt    


Gentoo Linux Security Announcement (200303-26)
Assunto: cryptographic weakness in Kerberos v4  
http://www.security.unicamp.br/docs/bugs/2003/03/v125.txt    


OpenPKG Security Advisory (OpenPKG-SA-SA-2003.027)
Assunto: remote root exploit in sendmail
http://www.security.unicamp.br/docs/bugs/2003/03/v124.txt    



29/03/2003
----------

CAIS-Alerta
Assunto: Remote Buffer Overflow in Sendmail
http://www.security.unicamp.br/docs/bugs/2003/03/v123.txt    


CERT Advisory (CA-2003-12)
Assunto:  Buffer Overflow in Sendmail
http://www.security.unicamp.br/docs/bugs/2003/03/v122.txt    


Slackware Security Team
Assunto: Samba buffer overflow fixed
http://www.security.unicamp.br/docs/bugs/2003/03/v121.txt    


Slackware Security Team
Assunto: Sendmail buffer overflow fixed
http://www.security.unicamp.br/docs/bugs/2003/03/v120.txt    


28/03/2003
----------

Debian Security Advisory (DSA 274-1)
Assunto: buffer overflow in mutt
http://www.security.unicamp.br/docs/bugs/2003/03/v119.txt    


Debian Security Advisory (DSA 273-1)
Assunto: Cryptographic weakness in krb4
http://www.security.unicamp.br/docs/bugs/2003/03/v118.txt    


Gentoo Linux Security Announcement (200303-25)
Assunto: buffer overrun in zlib
http://www.security.unicamp.br/docs/bugs/2003/03/v117.txt    


Debian Security Advisory (DSA 272-1)
Assunto: integer overflow in dietlibc
http://www.security.unicamp.br/docs/bugs/2003/03/v116.txt    


Mandrake Linux Security Update Advisory (MDKSA-2003:039)
Assunto: Vulnerabilidade de Seguranca no kernel22
http://www.security.unicamp.br/docs/bugs/2003/03/v115.txt    


Mandrake Linux Security Update Advisory (MDKSA-2003:038)
Assunto: Vulnerabilidade de Seguranca no kernel
http://www.security.unicamp.br/docs/bugs/2003/03/v114.txt    


27/03/2003
----------

CAIS-Resumo: Janeiro a Marco de 2003
http://www.security.unicamp.br/docs/bugs/2003/03/v113.txt    


Trustix Secure Linux Security Advisory (#2003-0014)
Assunto: Vulnerabilidade de Seguranca no pacote glibc
http://www.security.unicamp.br/docs/bugs/2003/03/v112.txt    


Trustix Secure Linux Security Advisory (#2003-0013)
Assunto: The openssl-0.9.6-13tr was open to the Klima-Pokorny-Rosa attack, this new one is patched against this problem.
http://www.security.unicamp.br/docs/bugs/2003/03/v111.txt    
 

Debian Security Advisory (DSA 271-1)
Assunto: unauthorized password change in ecartis and listar 
http://www.security.unicamp.br/docs/bugs/2003/03/v110.txt    


Debian Security Advisory (DSA 270-1)
Assunto: local privilege escalation
http://www.security.unicamp.br/docs/bugs/2003/03/v109.txt    


26/03/2003
----------

Red Hat Security Advisory (RHSA-2003:051-01)
Assunto: Updated kerberos packages fix various vulnerabilities
http://www.security.unicamp.br/docs/bugs/2003/03/v108.txt    
 
--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br