(PVS) Signatures - Tenable Network Security

CVE-2007-5461
Ruby Version Detection
PVS ID: 4246 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the Ruby web application. The reported version is '%L'
Solution: N/A
CVE Not available
Ruby on Rails Version Detection
PVS ID: 4247 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the Ruby on Rails web application. The reported version is
'%L'
Solution: N/A
CVE Not available
Ruby on Rails < 1.2.5 Multiple Vulnerabilities
PVS ID: 4248 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote
server is running the Ruby on Rails web application. The reported version is '%L'\nThis
version of Rails is reported to be vulnerable to a number of flaws. It is reported that a
remote attacker can perform man-in-the-middle attacks and gain user credentials. It is also
reported that there is a content-parsing flaw in the XML handler that would allow an
attacker to either gain unauthorized access to data or cause the application to fail.
Solution: Upgrade to version 1.2.5 or higher.
CVE-2007-5380
Opera < 9.24 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4249 FAMILY: Web Clients RISK: HIGH NESSUS ID:27506
Description: Synopsis :\n\nThe remote host contains a web browser that is affected by two
vulnerabilities.\n\nThe version of Opera installed on the remote host reportedly may allow
for arbitrary code execution if it has been configured to use an external news reader or
email client and a user views a specially-crafted web page. In addition, it may also allow a
script to bypass the same-origin policy and overwrite functions on pages from other
domains when processing frames from different web sites, which can be leveraged to
conduct cross-site scripting attacks.
Family Internet Services 1105