[SECURITY-L] Vulnerabilidades De Seguranca

[Silvana Mieko Misuta]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:


30/01/2003
----------

Apache Jakarta
Assunto: Apache Jakarta Tomcat 3 URL parsing vulnerability
http://www.security.unicamp.br/docs/bugs/2003/01/v125.txt    


29/01/2003
----------

Debian Security Advisory (DSA 246-1)
Assunto: information exposure, cross site scripting in tomcat
http://www.security.unicamp.br/docs/bugs/2003/01/v124.txt    
 

OpenPKG Security Advisory(OpenPKG-SA-2003.008)
Assunto: double free can cause denial of service in mysql
http://www.security.unicamp.br/docs/bugs/2003/01/v123.txt    


28/01/2003
----------


MIT krb5 Security Advisory (2003-001)
Assunto: Multiple vulnerabilities in old releases of MIT Kerberos 
http://www.security.unicamp.br/docs/bugs/2003/01/v122.txt    


Debian Security Advisory (DSA 245-1)
Assunto: ignored counter boundary in dhcp3 
http://www.security.unicamp.br/docs/bugs/2003/01/v121.txt    


27/01/2003
----------


Mandrake Linux Security Update Advisory(MDKSA-2003:011)
Assunto: Vulnerabilidade de Seguranca no pacote fetchmail
http://www.security.unicamp.br/docs/bugs/2003/01/v120.txt    


EnGarde Secure Linux Security Advisory(ESA-20030127-002)
Assunto: heap overflow vulnerability in fetchmail-ssl  
http://www.security.unicamp.br/docs/bugs/2003/01/v119.txt    


EnGarde Secure Linux Security Advisory(ESA-20030127-001)
Assunto: Several MySQL vulnerabilities in MySQL, MySQL-client, MySQL-shared  
http://www.security.unicamp.br/docs/bugs/2003/01/v118.txt    


26/01/2003
----------

Cisco Security Advisory
Assunto: Microsoft SQL Server 2000 Vulnerabilities in Cisco Products - MS02-061 
http://www.security.unicamp.br/docs/bugs/2003/01/v117.txt    


--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br