(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 7.4.1 or higher.
CVE-2008-0760
SeaMonkey < 1.1.7 Multiple Vulnerabilities
PVS ID: 4298 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected
by multiple vulnerabilities.\n\n The installed version of SeaMonkey is affected by
various security issues :\n\n - Three bugs that can result in crashes with traces of
memory corruption\n - A cross-site scripting vulnerability involving support for
the 'jar:' URI scheme\n - A timing issue when setting the 'window.location'
property that could be leveraged to conduct cross-site request forgery attacks.
Solution: Upgrade to version 1.1.7 or higher.
CVE-2007-5960
Ruby on Rails < 1.2.6 Cookie Related Session Fixation
PVS ID: 4299 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote server can be used to attack user authentication data.\n\nThe
remote server is running the Ruby on Rails web application. The reported version is
'%L'\nThis version of Rails is reported to be vulnerable to a flaw in the way that it handles
authentication data. Allegedly, the 'lib/action_controller/cgi_process.rb' script is vulnerable
to a flaw that would allow an attacker to steal cookie data. An attacker could then use this
data to gain access to the application with the user's credentials.
Solution: Upgrade to version 1.2.6 or higher.
CVE-2007-6077
IBM Director Version Detection
PVS ID: 4300 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote server is running IBM Director version: %L
Solution: N/A
IBM Director <
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4301 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1119