[SECURITY-L] Vulnerabilidades de Seguranca

[Silvana Mieko Misuta]

Srs. Usuarios,

Atualizamos o site da Equipe de Seguranca em Sistemas e Redes
da Unicamp com os seguintes boletins de vulnerabilidades:


26/03/2003
----------

RHN Errata Alert (RHSA-2003:051-30)
Assunto: Updated kerberos packages fix various vulnerabilities
http://www.security.unicamp.br/docs/bugs/2003/03/v107.txt    



Microsoft Security Bulletin (MS03-010)
Assunto: Flaw in RPC Endpoint Mapper Could Allow Denial of Service Attacks (331953)
http://www.security.unicamp.br/docs/bugs/2003/03/v106.txt    


CAIS-Alerta 
Assunto: Vulnerabilidade no Microsoft RPC Endpoint Mapper (331953)
http://www.security.unicamp.br/docs/bugs/2003/03/v105.txt    


CAIS-Alerta 
Assunto: CERT Advisory CA-2003-11 Multiple Vulnerabilities in Lotus Notes and Domino 
http://www.security.unicamp.br/docs/bugs/2003/03/v104.txt    


NetBSD Security Advisory (2003-008)
Assunto: faulty length checks in xdrmem_getbytes
http://www.security.unicamp.br/docs/bugs/2003/03/v103.txt    


NetBSD Security Advisory (2003-007)
Assunto: (Another) Encryption weakness in OpenSSL code
http://www.security.unicamp.br/docs/bugs/2003/03/v102.txt    
 

NetBSD Security Advisory (2003-005)
Assunto:  RSA timing attack in OpenSSL code
http://www.security.unicamp.br/docs/bugs/2003/03/v101.txt    


NetBSD Security Advisory (2003-004)
Assunto: Format string vulnerability in zlib gzprintf() 
http://www.security.unicamp.br/docs/bugs/2003/03/v100.txt    


CERT Advisory (CA-2003-11)
Assunto: Multiple Vulnerabilities in Lotus Notes and Domino 
http://www.security.unicamp.br/docs/bugs/2003/03/v99.txt    


SuSE Security Announcement (SuSE-SA:2003:022)
Assunto: remote system compromise in apcupsd 
http://www.security.unicamp.br/docs/bugs/2003/03/v98.txt    


Debian Security Advisory (DSA 269-1)
Assunto: Cryptographic weakness in heimdal
http://www.security.unicamp.br/docs/bugs/2003/03/v97.txt    


Corsaire Security Advisory
Assunto: Symantec Enterprise Firewall (SEF) HTTP URL pattern evasion issue
http://www.security.unicamp.br/docs/bugs/2003/03/v96.txt    


--
Equipe de Seguranca em Sistemas e Redes
Unicamp - Universidade Estadual de Campinas
Mailto:security em unicamp.br
http://www.security.unicamp.br