(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a SQL injection attack.\n\nThe remote
server is running the Ruby on Rails web application. The reported version is '%L'\nThis
version of Rails is reported to be vulnerable to a flaw in the way that it handles ':offset' and
':limit' parameters. An attacker exploiting these flaws would only require the ability to send
malformed requests to the application. Successful exploitation would result in the attacker
executing arbitrary SQL commands on the database used by Ruby on Rails.
Solution: Upgrade to version 2.1.1 or higher.
CVE-2008-4094
DB2 < 8 FixPak 17 Multiple Vulnerabilities
PVS ID: 4680 FAMILY: Database RISK: HIGH NESSUS ID:34195
Description: Synopsis :\n\nThe remote database server is affected by multiple issues.\n\nAccording to its
version, the installation of DB2 on the remote host is affected by multiple issues :\n\n - By
sending a malicious DB2 UDB v7 client CONNECT/DETACH requests it may be possible
to crash the remote DB2 server (IZ08134).\n\n - An unspecified vulnerability related to
'DB2FMP' exists in DB2 (IZ20350).\n\n - By sending malicious packets to 'DB2JDS', it
may be possible to crash the remote DB2 server (JR29274).\n\n - While running on
Windows 'DB2FMP' runs with OS privileges (JR30228).\n\n - DAS server code is affected
by a buffer overflow vulnerability (IZ22004).\n\n - Using INSTALL_JAR it may be
possible to create and overwrite critical files on the system (IZ22142).
Solution: Apply DB2 UDB Version 8 FixPak 17 or higher.
CVE-2008-3960
Google Chrome < 0.2.149.29 Multiple Vulnerabilities
PVS ID: 4681 FAMILY: Web Clients RISK: HIGH NESSUS ID:34197
Description: Synopsis : \n\nThe remote host contains a web browser that is affected by multiple
vulnerabilities.\n\nThe version of Google Chrome installed on the remote host is earlier
than 0.2.149.29. Such versions are reportedly are affected by several issues : \n\n - A buffer
overflow involving long filenames that display in the 'Save As...' dialog could lead to
arbitrary code execution (Issue number 1414).\n - A buffer overflow in handling of link
targets displayed in the status area when a user hovers over a link could lead to arbitrary
code execution (Fix number 1797).\n - An out-of-bounds memory read when parsing URLs
ending in ': %' could cause the application itself to crash (Issue number 122).\n - The
default Downloads directory is set to Desktop, which could lead to malicious cluttering of
the desktop with unwanted downloads and even execution of arbitrary programs (Fix
number 17933).\nThe exact browser version is: \n %L
Solution: Upgrade to version 0.2.149.29 or higher.
CVE-2008-6998
Mac OS X < 10.5.5 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1228