[SECURITY-L] Vulnerabilidades de seguranca

CSIRT - UNICAMP security em unicamp.br
Ter Ago 3 16:00:11 -03 2004


Srs. Usuarios,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) 
da Unicamp com os seguintes boletins de vulnerabilidades:


Anúncio de Segurança do Conectiva Linux
---------------------------------------
30/07/2004 - CLA-2004:855
Assunto: Vulnerabilidade de estouro de buffer no pacote sox. 
http://www.security.unicamp.br/docs/bugs/2004/07/v108.txt


CAIS-Alerta
-----------
03/08/2004
Assunto: Atualizacao do Boletim de Seguranca Microsoft MS04-025.
http://www.security.unicamp.br/docs/bugs/2004/08/v3.txt

30/07/2004
Assunto: Patch acumulativo para MS Internet Explorer (MS04-025). 
http://www.security.unicamp.br/docs/bugs/2004/07/v113.txt


Gentoo Linux Security Advisory
------------------------------
01/08/2004 - GLSA 200408-01
Assunto: MPlayer: GUI filename handling overflow.
http://www.security.unicamp.br/docs/bugs/2004/08/v1.txt

30/07/2004 - GLSA 200407-23
Assunto: SoX: Multiple buffer overflows. 
http://www.security.unicamp.br/docs/bugs/2004/07/v107.txt

29/07/2004 - GLSA 200407-22
Assunto: phpMyAdmin: Multiple vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2004/07/v105.txt


Mandrakelinux Security Update Advisory 
--------------------------------------
29/07/2004 - MDKSA-2004:077
Assunto: vulnerabilidades de seguranca no pacote wv.
http://www.security.unicamp.br/docs/bugs/2004/07/v106.txt


Microsoft Security Bulletins:
-----------------------------
01/08/2004 - Microsoft Security Bulletin Re-release, August 2004
http://www.security.unicamp.br/docs/bugs/2004/08/v2.txt

30/07/2004 - UPDATE: Microsoft Security Bulletin Summary for July 2004 
http://www.security.unicamp.br/docs/bugs/2004/07/v114.txt


SCO Security Advisory
---------------------
29/07/2004 - SCOSA-2004.12
Assunto: OpenServer 5.0.6 OpenServer 5.0.7 : uudecode does not check for symlink
or pipe. 
http://www.security.unicamp.br/docs/bugs/2004/07/v112.txt

29/07/2004 - SCOSA-2004.10
Assunto: OpenServer 5.0.6 OpenServer 5.0.7 : OpenSSL Multiple Vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2004/07/v111.txt

29/07/2004 - SCOSA-2004.3
Assunto: OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow
that could be exploited to gain root privileges. 
http://www.security.unicamp.br/docs/bugs/2004/07/v110.txt

29/07/2004 - SCOSA-2004.2
Assunto: UnixWare 7.1.3 Open UNIX 8.0.0 : Xsco contains a buffer overflow 
that could be exploited to gain root privileges. 
http://www.security.unicamp.br/docs/bugs/2004/07/v109.txt


US-CERT Technical Cyber Security Alert:
---------------------------------------
30/07/2004 - TA04-212A
Assunto: Critical Vulnerabilities in Microsoft Windows. 
http://www.security.unicamp.br/docs/bugs/2004/07/v115.txt

--
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security em unicamp.br
http://www.security.unicamp.br



Mais detalhes sobre a lista de discussão SECURITY-L