Secunia
|
|

|
|
|
|
|
|
|
|
|
|
|
|
|
|
Relating to this vendor: |
And, this specific program: WinSCP 4.x |
| daytrader | WinSCP 4.1.8 (current version) reported as old/insecure |
|---|---|
|
19th Dec, 2008 23:48 |
|
Ranking: 0 Posts: 13 User Since: 19th Dec, 2008 System Score: N/A Location: N/A |
I have WinSCP 4.1.8 from http://winscp.net/eng/index.php installed to a non-standard location. This is the latest, current, version. Secunia 1.0.0.3 reports it erroneously as ver. 4.0.0.342 and declares it to be insecure. The Download link points to a very old version: http://ovh.dl.sourceforge.net/sourceforge/winscp/w... -- which nonetheless is newer than the version erroneously reported by Secunia. |
| Bradley | RE: WinSCP 4.1.8 (current version) reported as old/insecure | ||||||||
|
20th Dec, 2008 01:29 | ||||||||
| Score: 1 Posts: 8 User Since: 19th Dec 2007 System Score: N/A Location: N/A |
I tried updating from 4.1.7 and it seemed to update fine and the WinSCP program works good too. BUT, now PSI 1.0.0.3 (after a full scan) only detected the removal of the 4.1.7 version and did not detect the new version at all. It is installed in the default location on my Windows XP SP3 system. | ||||||||
|
|||||||||
| daytrader | RE: WinSCP 4.1.8 (current version) reported as old/insecure | ||||||||
|
4th Jul, 2009 02:19 | ||||||||
| Score: 0 Posts: 13 User Since: 19th Dec 2008 System Score: N/A Location: N/A |
I now have Secunia 1.5 and WinSCP 4.1.9 -- the current version as I write this. WinSCP still shows up as insecure. The download offered by Secunia PSI is to a very old version, 4.0.4 -- the same version that the previous Secunia PSI platform erroneously offered for download. Other than this false negative and one other program, I have no fixable vulnerabilities shown. I'm at 99%. Would like Secunia to address this one, please. |
||||||||
|
|||||||||
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |