(PVS) Signatures - Tenable Network Security

2008-56)\n - There is an error in the method used to parse the default namespace in an E4X
document caused by quote characters in the namespace not being properly escaped. (MFSA
2008-58)\n - Scripts in a malicious mail message can access the .document URI and
.textContext DOM properties. (MFSA 2008-59)\n\nThe reported version of Thunderbird is:
\n %L
Solution: Upgrade to version 2.0.0.18 or higher.
CVE-2008-5052
Symantec Backup Exec Detection
PVS ID: 4763 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Symantec Backup Exec, an enterprise solution for managing
archived data. The reported version is: \n %L
Solution: N/A
CVE Not available
Ruby on Rails < 2.0.5 Multiple Vulnerabilities
PVS ID: 4764 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote
server is running the Ruby on Rails web application. The reported version is '%L'\nThis
version of Rails is reported to be vulnerable to a flaw in the way that it handles
user-supplied input to the 'redirect_to()' function in the 'ActionController::Base' class. An
attacker exploiting this flaw would be able to inject arbitrary HTTP headers that could lead
to cross-site request forgery (CSRF), cross-site scripting (XSS) and other attacks.
Solution: Upgrade to version 2.0.5 or higher.
CVE-2008-5189
MDaemon WorldClient < 10.0.2 Script Injection
PVS ID: 4765 FAMILY: POP Server
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:34849
Description: Synopsis : \n\nThe remote mail server is prone to a script injection vulnerability.\n\nThe
remote host is running Alt-N MDaemon, a mail server for Windows. According to its
banner, a version of MDaemon mail server older than 10.0.2 is installed on the remote host.
Such versions ship with a version of WorldClient (a webmail client) that is affected by a
script injection vulnerability. By tricking a user into opening a specially crafted email, an
attacker can exploit this issue to execute script code in the user's browser in the security
context of the affected application and thereby steal cookie based credentials or launch
other attacks. The reported version of MDaemon is: \n %L
Family Internet Services 1254