[SECURITY-L] Vulnerabilidades de seguranca

CSIRT - UNICAMP security em unicamp.br
Seg Nov 7 11:40:51 -02 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:


CAIS-Alerta:
============
04/11/2005
Assunto: Vulnerabilidade nos relogios de sistema do Cisco IOS permite
execucao remota.
http://www.security.unicamp.br/docs/bugs/2005/11/v15.txt 


Cisco Security Advisory:
========================
02/11/2005
Assunto: IOS Heap-based Overflow Vulnerability in System Timers. 
http://www.security.unicamp.br/docs/bugs/2005/11/v3.txt 

02/11/2005
Assunto: Cisco Airespace Wireless LAN Controllers Allow Unencrypted
Network Access. 
http://www.security.unicamp.br/docs/bugs/2005/11/v2.txt 

01/11/2005
Assunto: Cisco IPS MC Malformed Configuration Download Vulnerability.
http://www.security.unicamp.br/docs/bugs/2005/11/v1.txt 


Debian Security Advisory:
=========================
04/11/2005 - DSA 883-1
Assunto: thttpd. 
http://www.security.unicamp.br/docs/bugs/2005/11/v8.txt 

04/11/2005 - DSA 882-1
Assunto: openssl095. 
http://www.security.unicamp.br/docs/bugs/2005/11/v7.txt 

04/11/2005 - DSA 881-1
Assunto: openssl096. 
http://www.security.unicamp.br/docs/bugs/2005/11/v6.txt 

02/11/2005 - DSA 880-1
Assunto: phpmyadmin.
http://www.security.unicamp.br/docs/bugs/2005/11/v4.txt 

02/11/2005 - DSA 879-1
Assunto: gallery.
http://www.security.unicamp.br/docs/bugs/2005/11/v5.txt 


Fedora Update Notification:
===========================
03/11/2005 - FEDORA-2005-1045
Assunto: Fedora Core 3: libungif.
http://www.security.unicamp.br/docs/bugs/2005/11/v13.txt 

31/10/2005 - FEDORA-2005-1042
Assunto: Fedora Core 3: openssl096b.
http://www.security.unicamp.br/docs/bugs/2005/10/v221.txt 


Gentoo Linux Security Advisory:
===============================
04/11/2005 - GLSA 200511-03
Assunto: giflib: Multiple vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/11/v19.txt 

02/11/2005 - GLSA 200511-02
Assunto: QDBM, ImageMagick, GDAL: RUNPATH issues. 
http://www.security.unicamp.br/docs/bugs/2005/11/v18.txt 

02/11/2005 - GLSA 200511-01
Assunto: libgda: Format string vulnerabilities.
http://www.security.unicamp.br/docs/bugs/2005/11/v17.txt 


HP Security Bulletin:
=====================
31/10/2005 - HPSBOV01239 - REVISION: 0 - SSRT051029 rev.0
Assunto: HP OpenVMS Local Denial of Service (DoS). 
http://www.security.unicamp.br/docs/bugs/2005/10/v222.txt 


Mandriva Linux Security Update Advisory:
========================================
01/11/2005 - MDKSA-2005:204
Assunto: wget. 
http://www.security.unicamp.br/docs/bugs/2005/11/v11.txt 

01/11/2005 - MDKSA-2005:203
Assunto: gda2.0.
http://www.security.unicamp.br/docs/bugs/2005/11/v9.txt 

01/11/2005 - MDKSA-2005:202
Assunto: squirrelmail.
http://www.security.unicamp.br/docs/bugs/2005/11/v10.txt 


OpenPKG Security Advisory:
==========================
02/11/2005 - OpenPKG-SA-2005.023
Assunto: openvpn.
http://www.security.unicamp.br/docs/bugs/2005/11/v12.txt 


Slackware Security Advisory:
============================
06/11/2005 - SSA:2005-310-06
Assunto: imapd.
http://www.security.unicamp.br/docs/bugs/2005/11/v20.txt 

06/11/2005 - SSA:2005-310-05
Assunto: PHP. 
http://www.security.unicamp.br/docs/bugs/2005/11/v25.txt 

06/11/2005 - SSA:2005-310-04
Assunto: apache. 
http://www.security.unicamp.br/docs/bugs/2005/11/v23.txt 

06/11/2005 - SSA:2005-310-03
Assunto: lynx.
http://www.security.unicamp.br/docs/bugs/2005/11/v21.txt 

06/11/2005 - SSA:2005-310-02
Assunto: KOffice/KWord.
http://www.security.unicamp.br/docs/bugs/2005/11/v22.txt 

06/11/2005 - SSA:2005-310-01
Assunto: curl/wget.
http://www.security.unicamp.br/docs/bugs/2005/11/v24.txt 


SUSE Security Announcement:
===========================
04/11/2005 - SUSE-SA:2005:064
Assunto: pwdutils, shadow.
http://www.security.unicamp.br/docs/bugs/2005/11/v16.txt 


- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFDb1kW/UMb1l3gm8IRAgfPAKC+mcbXy7BTTDOXERIsFbfu8qHrFQCg4/JF
PXr0AoSDN2ksBKWUKBJgjkE=
=YjZp
-----END PGP SIGNATURE-----



Mais detalhes sobre a lista de discussão SECURITY-L