[SECURITY-L] Vulnerabilidades de Seguranca

[Silvana Mieko Misuta]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:


11/04/2003
----------

Red Hat Network Alert (RHSA-2003:089-11)
Assunto: RHN Errata Alert: Updated glibc packages fix vulnerabilities in RPC XDR decoder
http://www.security.unicamp.br/docs/bugs/2003/04/v95.txt 


10/04/2003
----------

Centro de Atendimento a Incidentes de Seguranca
Assunto: CAIS-Alerta: Nova vulnerabilidade no SAMBA
http://www.security.unicamp.br/docs/bugs/2003/04/v94.txt 


SGI Security Advisory (20030404-01-P)
Assunto: xfsdump creates files insecurely
http://www.security.unicamp.br/docs/bugs/2003/04/v93.txt 


Gentoo Linux Security Announcement (200304-04)
Assunto: aribitrary code execution in kde-3.x
http://www.security.unicamp.br/docs/bugs/2003/04/v92.txt 
 

Mandrake Linux Security Update Advisory (MDKSA-2003:038-1)
Assunto: Vulnerabilidade de Seguranca no kernel
http://www.security.unicamp.br/docs/bugs/2003/04/v91.txt 


KDE Security Advisory (2003-04-09)
Assunto: PS/PDF file handling vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v90.txt 


Anuncio de Seguranca do Conectiva Linux (CLA-2003:625)
Assunto: Vulnerabilidades na biblioteca OpenSSL 
http://www.security.unicamp.br/docs/bugs/2003/04/v89.txt 


Centro de Atendimento a Incidentes de Seguranca
Assunto: CAIS-Alerta: Vulnerabilidade no Microsoft Winsock Proxy e ISA Firewall (331066)
http://www.security.unicamp.br/docs/bugs/2003/04/v88.txt 


Centro de Atendimento a Incidentes de Seguranca
Assunto: CAIS-Alerta: Vulnerabilidade no Microsoft virtual machine (816093)
http://www.security.unicamp.br/docs/bugs/2003/04/v87.txt 


Red Hat Network Alert (RHSA-2003:139-07)
Assunto: Updated httpd packages fix security vulnerabilities.
http://www.security.unicamp.br/docs/bugs/2003/04/v86.txt 


Red Hat Network Alert (RHBA-2003:080-10)
Assunto: Updated RHN Notification Tool available
http://www.security.unicamp.br/docs/bugs/2003/04/v85.txt 


09/04/2003
----------

Microsoft Security Bulletin (MS00-084)
Assunto: Patch Available for 'Indexing Services Cross Site Scripting' Vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v84.txt 


Microsoft Security Bulletin (MS03-011)
Assunto: Flaw in Microsoft VM Could Enable System Compromise (816093)
http://www.security.unicamp.br/docs/bugs/2003/04/v83.txt 


Microsoft Security Bulletin (MS03-012)
Assunto: Flaw In Winsock Proxy Service And ISA Server Firewall Service Can Cause Denial Of Service (331066)
http://www.security.unicamp.br/docs/bugs/2003/04/v82.txt 


Red Hat Network Alert (RHSA-2003:036-10)
Assunto: RHN Errata Alert: Updated mgetty packages available
http://www.security.unicamp.br/docs/bugs/2003/04/v81.txt 


Red Hat Network Alert (RHSA-2003:137-09)
Assunto: RHN Errata Alert: New samba packages fix security vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v80.txt 


SGI Security Advisory (20030403-01-P)
Assunto: Samba Security Vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v79.txt 


Red Hat Security Advisory (RHSA-2003:137-02)
Assunto: New samba packages fix security vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v78.txt 


iDEFENSE Security Advisory (04.09.03)
Assunto: Denial of Service in Microsoft Proxy Server 2.0 and Internet Security and Acceleration Server 2000
http://www.security.unicamp.br/docs/bugs/2003/04/v77.txt 


Gentoo Linux Security Announcement (200304-02)
Assunto: Buffer overflow in samba
http://www.security.unicamp.br/docs/bugs/2003/04/v76.txt 


Debian Security Advisory (DSA 269-2)
Assunto: Cryptographic weakness in heimdal
http://www.security.unicamp.br/docs/bugs/2003/04/v75.txt 
 

Gentoo Linux Security Announcement (200304-01)
Assunto: Denial of service in Apache 2.x 
http://www.security.unicamp.br/docs/bugs/2003/04/v73.txt 


Immunix Secured OS Security Advisory (IMNX-2003-7+-008-01)
Assunto: There have been a number of vulnerabilities found in MySQL and the MySQL Client package.
http://www.security.unicamp.br/docs/bugs/2003/04/v72.txt 


Immunix Secured OS Security Advisory (IMNX-2003-7+-005-01)
Assunto: Multiple vulnerabilities have been discovered in PostgreSQL.
http://www.security.unicamp.br/docs/bugs/2003/04/v71.txt 


Gentoo Linux Security Announcement (200304-03)
Assunto: buffer overflow in setiathome
http://www.security.unicamp.br/docs/bugs/2003/04/v70.txt 


08/04/2003
----------


CONECTIVA LINUX SECURITY ANNOUNCEMENT (CLA-2003:624)
Assunto: Remote vulnerability in samba
http://www.security.unicamp.br/docs/bugs/2003/04/v74.txt 


Anuncio de Seguranca do Conectiva Linux (CLA-2003:624)
Assunto: Vulnerabilidade remota no samba
http://www.security.unicamp.br/docs/bugs/2003/04/v69.txt 

 
--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br