[SECURITY-L] Vulnerabilidades de Seguranca

Qui Mar 20 14:57:24 -03 2003

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:

20/03/2003
----------

CAIS-Alerta
Assunto: Vulnerabilidade critica no Windows Script Engine (814078) 
http://www.security.unicamp.br/docs/bugs/2003/03/v53.txt    

CAIS-Alerta
Assunto: Vulnerabilidade no Microsoft ISA Server DNS (331065) 
http://www.security.unicamp.br/docs/bugs/2003/03/v52.txt    

EnGarde Secure Linux Security Advisory(ESA-20030320-010)
Assunto: Several vulnerabilities in the OpenSSL toolkit.
http://www.security.unicamp.br/docs/bugs/2003/03/v51.txt    

CAIS-Alerta
Assunto: CAIS-Alerta: CERT Advisory CA-2003-10 Integer Overflow In Sun RPC XDR library routines
http://www.security.unicamp.br/docs/bugs/2003/03/v50.txt    

Red Hat Security Advisory(RHSA-2003:088-01)
Assunto: New kernel 2.2 packages fix vulnerabilities
http://www.security.unicamp.br/docs/bugs/2003/03/v49.txt    

19/03/2003
----------

RHN Errata Alert
Assunto: Updated glibc packages fix vulnerabilities in RPC XDR decoder
http://www.security.unicamp.br/docs/bugs/2003/03/v48.txt    

Microsoft Security Bulletin (MS03-008)
Assunto: Flaw in Windows Script Engine Could Allow Code Execution (814078)
http://www.security.unicamp.br/docs/bugs/2003/03/v47.txt    

Microsoft Security Bulletin (MS03-009)
Assunto: Flaw In ISA Server DNS Intrusion Detection Filter Can Cause Denial Of Service (331065)
http://www.security.unicamp.br/docs/bugs/2003/03/v46.txt    

SCO Security Advisory(CSSA-2003-013.0)
Assunto: Linux: integer overflow vulnerability in XDR/RPC routines
http://www.security.unicamp.br/docs/bugs/2003/03/v45.txt    

MIT krb5 Security Advisory (2003-003)
Assunto: faulty length checks in xdrmem_getbytes 
http://www.security.unicamp.br/docs/bugs/2003/03/v44.txt    

Red Hat Security Advisory(RHSA-2003:089-00)
Assunto: Updated glibc packages fix vulnerabilities in RPC XDR decoder
http://www.security.unicamp.br/docs/bugs/2003/03/v43.txt    

SGI Security Advisory(20030302-01-I)
Assunto: SMB/CIFS Security Vulnerability in Samba
http://www.security.unicamp.br/docs/bugs/2003/03/v42.txt    

OpenSSL Security Advisory 
Assunto: Klima-Pokorny-Rosa attack on RSA in SSL/TLS
http://www.security.unicamp.br/docs/bugs/2003/03/v41.txt    

--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br    