[SECURITY-L] Vulnerabilidades de Seguranca

[Silvana Mieko Misuta]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:



16/04/2003
----------

CONECTIVA LINUX SECURITY ANNOUNCEMENT (CLA-2003:627)
Assunto: Several vulnerabilities in ethereal
http://www.security.unicamp.br/docs/bugs/2003/04/v123.txt 


Anuncio de Seguranca do Conectiva Linux (CLA-2003:627)
Assunto: Diversas vulnerabilidades no pacote ethereal
http://www.security.unicamp.br/docs/bugs/2003/04/v122.txt 


Mandrake Linux Security Update Advisory (MDKSA-2003:048)
Assunto: Vulnerabilidade de Seguranca no pacote eog
http://www.security.unicamp.br/docs/bugs/2003/04/v121.txt 


Mandrake Linux Security Update Advisory (MDKSA-2003:047)
Assunto: Vulnerabilidade de Seguranca no pacote xfsdump
http://www.security.unicamp.br/docs/bugs/2003/04/v120.txt 



15/04/2003
----------

Core Security Technologies Advisory (CORE-2003-0307)
Assunto: Snort TCP Stream Reassembly Integer Overflow Vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v119.txt 


Immunix Secured OS Security Advisory (IMNX-2003-7+-009-01)
Assunto: Vulnerabilidade de Seguranca no pacote glibc
http://www.security.unicamp.br/docs/bugs/2003/04/v118.txt 


Mandrake Linux Security Update Advisory (MDKSA-2003:046)
Assunto: Vulnerabilidade de Seguranca no pacote gtkhtml
http://www.security.unicamp.br/docs/bugs/2003/04/v117.txt 


Mandrake Linux Security Update Advisory (MDKSA-2003:045)
Assunto: Vulnerabilidade de Seguranca no pacote evolution 
http://www.security.unicamp.br/docs/bugs/2003/04/v116.txt 


Debian Security Advisory (DSA 267-2)
Assunto: buffer overflow in lpr
http://www.security.unicamp.br/docs/bugs/2003/04/v115.txt 


Security Corporation Security Advisory (SCSA-016)
Assunto: Multiple vulnerabilities in Ez publish
http://www.security.unicamp.br/docs/bugs/2003/04/v114.txt 



14/04/2003
----------

Debian Security Advisory (DSA 287-1)
Assunto: buffer overflows in epic
http://www.security.unicamp.br/docs/bugs/2003/04/v113.txt 


Gentoo Linux Security Announcement (200304-04.1)
Assunto: aribitrary code execution in kdegraphics-3.1.x
http://www.security.unicamp.br/docs/bugs/2003/04/v112.txt 


CONECTIVA LINUX SECURITY ANNOUNCEMENT
Assunto:  Buffer overflow in IMAP code on mutt
http://www.security.unicamp.br/docs/bugs/2003/04/v111.txt 


Anuncio de Seguranca do Conectiva Linux (CLA-2003:626)
Assunto:  Estouro de buffer no leitor IMAP do pacote mutt
http://www.security.unicamp.br/docs/bugs/2003/04/v110.txt 


SGI Security Advisory (20030406-01-P)
Assunto: Multiple Vulnerabilities in BSD LPR Subsystem
http://www.security.unicamp.br/docs/bugs/2003/04/v109.txt 


Debian Security Advisory (DSA 286-1)
Assunto: insecure temporary file in gs-common
http://www.security.unicamp.br/docs/bugs/2003/04/v108.txt 


Debian Security Advisory (DSA 285-1)
Assunto: insecure temporary file in lprng
http://www.security.unicamp.br/docs/bugs/2003/04/v107.txt 


Red Hat Security Advisory (RHSA-2003:126-01)
Assunto: Updated gtkhtml packages fix vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v106.txt 


Gentoo Linux Security Announcement (200304-05)
Assunto: arbitrary code execution in kde-2.x
http://www.security.unicamp.br/docs/bugs/2003/04/v105.txt 


13/04/2003
----------


Beyond Security Ltd.
Assunto: Misuse of Macromedia Flash Ads clickTAG Option May Lead to Privacy Breach 
http://www.security.unicamp.br/docs/bugs/2003/04/v104.txt 


12/04/2003
----------

Debian Security Advisory (DSA 284-1)
Assunto: insecure execution in kdegraphics
http://www.security.unicamp.br/docs/bugs/2003/04/v103.txt 


11/04/2003
----------


Rapid7, Inc. Security Advisory (R7-0013)
Assunto: Heap Corruption in Gaim-Encryption Plugin
http://www.security.unicamp.br/docs/bugs/2003/04/v102.txt 


SGI Security Advisory (20030405-01-I)
Assunto: Brocade Firmware SNMP Vulnerability
http://www.security.unicamp.br/docs/bugs/2003/04/v101.txt 


SGI Security Advisory (20021102-03-P)
Assunto: ToolTalk Vulnerabilities Update 
http://www.security.unicamp.br/docs/bugs/2003/04/v100.txt 


Gentoo Linux Security Announcement (200304-05)
Assunto: aribitrary code execution in kde-2.x
http://www.security.unicamp.br/docs/bugs/2003/04/v99.txt 


Debian Security Advisory (DSA 283-1)
Assunto: insecure file creation in xfsdump
http://www.security.unicamp.br/docs/bugs/2003/04/v98.txt 



10/04/2003
----------

@stake Security Advisory (a041003-1 -)
Assunto: MacOS X DirectoryService Privilege Escalation and DoS Attack 
http://www.security.unicamp.br/docs/bugs/2003/04/v97.txt 



07/04/2003
----------

Debian Security Advisory (DSA 274-2)
Assunto: buffer overflow in mutt
http://www.security.unicamp.br/docs/bugs/2003/04/v96.txt 


 
--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br