[SECURITY-L] Vulnerabilidades de seguranca

Qui Set 29 16:44:08 -03 2005

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Srs. Assinantes,

Atualizamos o site do CSIRT (Computer Security Incident Response Team) da Unicamp
com os seguintes boletins de vulnerabilidades:

Anúncio de Segurança do Conectiva Linux:
========================================
23/09/2005 - CLA-2005:1012
Assunto: correção para vulnerabilidade do lm_sensors.
http://www.security.unicamp.br/docs/bugs/2005/09/v128.txt

23/09/2005 - CLA-2005:1011
Assunto: Correção para falha de segurança do kde. 
http://www.security.unicamp.br/docs/bugs/2005/09/v127.txt

CAIS-Alerta:
============
20/09/2005
Assunto: Vulnerabilidades no aplicativo Zboard. 
http://www.security.unicamp.br/docs/bugs/2005/09/v117.txt

20/09/2005
Assunto: Inicio do Horario de Verao 2005/2006.
http://www.security.unicamp.br/docs/bugs/2005/09/v116.txt

Debian Security Advisory:
=========================
24/09/2005 - DSA 820-1
Assunto: vulnerabilidade de seguranca no pacote courier.
http://www.security.unicamp.br/docs/bugs/2005/09/v129.txt

23/09/2005 - DSA 819-1
Assunto: vulnerabilidade de seguranca no pacote python2.1.
http://www.security.unicamp.br/docs/bugs/2005/09/v126.txt

22/09/2005 - DSA 818-1
Assunto: vulnerabilidade de seguranca no pacote kdeedu.
http://www.security.unicamp.br/docs/bugs/2005/09/v125.txt

22/09/2005 - DSA 817-1
Assunto: vulnerabilidade de seguranca no pacote python2.2.
http://www.security.unicamp.br/docs/bugs/2005/09/v101.txt

19/09/2005 - DSA 816-1
Assunto: vulnerabilidade de seguranca no pacote xfree86.
http://www.security.unicamp.br/docs/bugs/2005/09/v124.txt

Fedora Update Notification:
===========================
22/09/2005 - FEDORA-2005-908
Assunto: Fedora Core 3: cups. 
http://www.security.unicamp.br/docs/bugs/2005/09/v135.txt

22/09/2005 - FEDORA-2005-906
Assunto: Fedora Core 4: kernel. 
http://www.security.unicamp.br/docs/bugs/2005/09/v134.txt

22/09/2005 - FEDORA-2005-905
Assunto: Fedora Core 3: kernel. 
http://www.security.unicamp.br/docs/bugs/2005/09/v133.txt

Gentoo Linux Security Advisory:
===============================
24/09/2005 - GLSA 200509-17
Assunto: Webmin, Usermin: Remote code execution through PAM
authentication. 
http://www.security.unicamp.br/docs/bugs/2005/09/v130.txt

24/09/2005 - GLSA 200509-16
Assunto: Mantis: XSS and SQL injection vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/09/v132.txt

22/09/2005 - GLSA 200507-20:02
Assunto: Shorewall: Security policy bypass. 
http://www.security.unicamp.br/docs/bugs/2005/09/v104.txt

20/09/2005 - GLSA 200509-14
Assunto: Zebedee: Denial of Service vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/09/v108.txt

19/09/2005 - GLSA 200509-13
Assunto: Clam AntiVirus: Multiple vulnerabilities.
http://www.security.unicamp.br/docs/bugs/2005/09/v107.txt

18/09/2005 - GLSA 200509-12
Assunto: Apache, mod_ssl: Multiple vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/09/v106.txt

18/09/2005 - GLSA 200509-11
Assunto: Mozilla Suite, Mozilla Firefox: Buffer overflow. 
http://www.security.unicamp.br/docs/bugs/2005/09/v105.txt

17/09/2005 - GLSA 200510-09
Assunto: Mailutils: Format string vulnerability in imap4d. 
http://www.security.unicamp.br/docs/bugs/2005/09/v103.txt

17/09/2005 - GLSA 200509-09
Assunto: Py2Play: Remote execution of arbitrary Python code. 
http://www.security.unicamp.br/docs/bugs/2005/09/v102.txt

HP Security Bulletin:
=====================
22/09/2005 - HPSBMA01212 - REVISION: 2
Assunto: SSRT5998 Rev.2 HP System Management Homepage (v2.0.x) 
Denial of Service (DoS) and XSS. 
http://www.security.unicamp.br/docs/bugs/2005/09/v137.txt

21/09/2005 - HPSBTU01228 - REVISION: 1
Assunto: SSRT5988 rev.1 - HP Tru64 Unix libXpm Remote Denial of
Service (DoS) or Execute Privileged Code. 
http://www.security.unicamp.br/docs/bugs/2005/09/v122.txt

20/09/2005 - HPSBOV01229 - REVISION: 0
Assunto: SSRT5999 rev.0 HP OpenVMS Secure Web Browser Mozilla 
Application Node Spoofing. 
http://www.security.unicamp.br/docs/bugs/2005/09/v115.txt

20/09/2005 - HPSBTU01227 - REVISION: 0
Assunto: SSRT5971 rev.0 - HP Tru64 Unix FTP Daemon (ftpd) Remote
Denial of Service (DoS). 
http://www.security.unicamp.br/docs/bugs/2005/09/v114.txt

Mandriva Linux Security Update Advisory
=======================================
20/09/2005 - MDKSA-2005:168
Assunto: vulnerabilidade de seguranca no pacote masqmail. 
http://www.security.unicamp.br/docs/bugs/2005/09/v121.txt

20/09/2005 - MDKSA-2005:167
Assunto: vulnerabilidade de seguranca no pacote util-linux. 
http://www.security.unicamp.br/docs/bugs/2005/09/v120.txt

20/09/2005 - MDKSA-2005:166
Assunto: vulnerabilidade de seguranca no pacote clamav. 
http://www.security.unicamp.br/docs/bugs/2005/09/v119.txt

19/09/2005 - MDKSA-2005:138-1
Assunto: vulnerabilidade de seguranca no pacote cups. 
http://www.security.unicamp.br/docs/bugs/2005/09/v112.txt

15/09/2005 - MDKSA-2005:165 
Assunto: vulnerabilidade de seguranca no pacote cups. 
http://www.security.unicamp.br/docs/bugs/2005/09/v113.txt

SCO Security Advisory:
======================
22/09/2005 - SCOSA-2005.38
Assunto: OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/09/v136.txt

20/09/2005 - SCOSA-2005.34
Assunto: UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec.
http://www.security.unicamp.br/docs/bugs/2005/09/v118.txt

Trustix Secure Linux Security Advisory:
=======================================
23/09/2005 - #2005-0051
Assunto: vulnerabilidade de seguranca no pacote clamav. 
http://www.security.unicamp.br/docs/bugs/2005/09/v139.txt

Ubuntu Security Notice:
=======================
23/09/2005 - USN-186-1
Assunto: mozilla, mozilla-firefox vulnerabilities. 
http://www.security.unicamp.br/docs/bugs/2005/09/v131.txt

20/09/2005 - USN-185-1
Assunto: cupsys vulnerability. 
http://www.security.unicamp.br/docs/bugs/2005/09/v111.txt

19/09/2005 - USN-184-1
Assunto: util-linux vulnerability.
http://www.security.unicamp.br/docs/bugs/2005/09/v110.txt

- --
Computer Security Incident Response Team - CSIRT
Universidade Estadual de Campinas - UNICAMP
mailto:security at unicamp.br
http://www.security.unicamp.br
GnuPG Public Key: http://www.security.unicamp.br/security.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFDPEOe/UMb1l3gm8IRAgryAJ0WFOoykE99PAma+5/e4VMe4zKmUQCgpn+e
PRINS6sb0jLQVXvPtBhMgUw=
=OOLw
-----END PGP SIGNATURE-----