Secunia
|
|

|
|
|
|
|
|
|
|
|
|
|
|
|
| bjm__ | MozBackup 1.x |
|---|---|
|
16th Jul, 2010 23:01 |
|
Ranking: 64 Posts: 374 User Since: 9th Mar, 2009 System Score: 100% Location: US Last edited on 16th Jul, 2010 23:02 |
Hello Community Installed MozBackup-1.4.10-EN today... (no prior ver installed) C:\Users\BJM\Downloads\MozBackup-1.4.10-EN\MozBack PSI reports after reboot and rescan MozBackup 1.x 1.4.9.0 MozBackup 1.4.10 released > December 13th, 2009 Should PSI report MozBackup 1.x 1.4.9.0 or 1.4.10 ? Thanks bjm- |
| thedillpickl | RE: MozBackup 1.x | ||||||||
|
17th Jul, 2010 00:00 | ||||||||
| Score: 376 Posts: 872 User Since: 3rd May 2009 System Score: 100% Location: US |
Hi bjm; If you look in its folder, is there more than one version of the file PSI is pointing to? Sounds a bit odd, but MozBackup must have installed an old file or something. Just a thought. Fred -- XP Home Chrome, Firefox, IE8 -- consilio et animis |
||||||||
|
|||||||||
| bjm__ | RE: MozBackup 1.x | ||||||||
|
17th Jul, 2010 10:28 | ||||||||
| Score: 64 Posts: 374 User Since: 9th Mar 2009 System Score: 100% Location: US |
the data posted to my original post is copy / paste from PSI UI. MozBackup is not installed to C:/ProgramFiles/ MozBackup application was downloaded / saved to my Downloads Folder...app is run from Downloads via Desktop shortcut... the application.exe was named with the download / save as 1.4.10 so, PSI reports ... Installation Path C:\Users\BJM\Downloads\MozBackup-1.4.10-EN\MozBack & Version Detected ... 1.4.9.0 |
||||||||
|
|||||||||
| thedillpickl | RE: MozBackup 1.x | ||||||||
|
17th Jul, 2010 16:00 | ||||||||
| Score: 376 Posts: 872 User Since: 3rd May 2009 System Score: 100% Location: US |
Hi bjm; If I'm reading correctly, MozBackup.exe doesn't install anything, it is the program, with no associated files? Also you have left it in your download folder and the desktop shortcut points to it there. You said: "PSI reports after reboot and rescan MozBackup 1.x 1.4.9.0 MozBackup 1.4.10 released > December 13th, 2009" Does this mean PSI is detecting two versions? Tried to view MozBackup's install/usage instruction. Found the site OK. Couldn't find install instructions or what files you're supposed to have. Would it be OK to delete the folder and try a fresh install? Fred -- XP Home Chrome, Firefox, IE8 -- consilio et animis |
||||||||
|
|||||||||
| bjm__ | RE: MozBackup 1.x | ||||||||
|
17th Jul, 2010 18:35 | ||||||||
| Score: 64 Posts: 374 User Since: 9th Mar 2009 System Score: 100% Location: US Last edited on 17th Jul, 2010 19:06 |
Good day & thanks for your reply http://mozbackup.org/ Download MozBackup 1.4.10 Stable I pulled ZIP version (no install) from http://mozbackup.org/ saved to Downloads - export Backup to Documents - import from Documents -------------------------------------------------- mirror for > install program or ZIP version (no install) http://mozbackup.jasnapaka.com/ December 13th, 2009 MozBackup 1.4.10 released! This version comes with some bugfixes. See Changelog, Download. http://mozbackup.jasnapaka.com/download.php mirror download sites > Download from SourceForge: install program, ZIP version (no install) Download from JasnaPaka.com: install program, ZIP version (no install) -------------------------------------------------- try 0ne or all Five file links....each link upon "Save File" renders > MozBackup-1.4.10-EN -------------------------------------------------- http://kb.mozillazine.org/MozBackup MozBackup is a standalone utility (for Windows only) rather than an extension -------------------------------------------------- (this is dated but, essentially identical for 1.4.10 with FF3.6.6) http://www.howtogeek.com/howto/2418/backup-your-mo... ---------------------------------------- Screenshot for user account BJM & user account BJMS as their FF Profile is not identical BJM user account http://a.imagehost.org/0701/MozBack_for_BJM.png & BJMS user account http://j.imagehost.org/0296/MozBackup_for_BJMS.png -------------------------------------------------- http://techdows.com/2010/03/backup-and-restore-fir... -------------------------------------------------- FAQ's & Instructions re MozBackup http://mozbackup.jasnapaka.com/support.php with regard to specific app Install Instructions ... only issue I read somewhere was updates are not overwritten...they're new install this is my initial use of the app and it's just so darn simple ... maybe this version makes it so simple...the Wizard offers all one needs to know. Thanks again and excuse the very very long post Cheers bjm- |
||||||||
|
|||||||||
| thedillpickl | RE: MozBackup 1.x | ||||||||
|
17th Jul, 2010 21:42 | ||||||||
| Score: 376 Posts: 872 User Since: 3rd May 2009 System Score: 100% Location: US |
Hi bjm; Couldn't find the info I was looking for but mozbackup.org was more help than the jasnapaka (the one I found earlier). To cut to the chase: I've downloaded the latest version to see what's up and have found the same thing to be true on my machine. MozBackup version 1.4.10 installs mozbackup.exe version 1.4.9.0, date 12/13/2009 . The versions don't have to match, but it is considered good practice. PSI reports the version of the .exe file not the download. Until MozBackup updates the version number it will stay the same. PSI reports 1.4.9.0 as patched, so no problem there. To get the program version and executable version numbers to match you would have to get in touch with Pavel Cvrcek. In my test download, the install wizard placed it "C:\program files\MozBackup\ . It is fine to place yours in the download folder as long as you remember it is there. Also the install did have all the usual extra files. Never found specifications on what files are supposed to be in the download package. No problem with post length, I love the long ones :) (sarcasm intended). This was weird though, I'll give you that. Take care; Fred -- XP Home Chrome, Firefox, IE8 -- consilio et animis |
||||||||
|
|||||||||
| bjm__ | RE: MozBackup 1.x | ||||||||
|
18th Jul, 2010 01:48 | ||||||||
| Score: 64 Posts: 374 User Since: 9th Mar 2009 System Score: 100% Location: US Last edited on 18th Jul, 2010 01:54 |
Hello thedillpickl Appreciate your time and confirmation. I was aware as to the secure status...was just that I can usually find a simple explanation for a PSI reporting anomaly & the time that this version has been available...was just unusual to see a reporting anomaly. I saved it to Downloads as I this was my initial introduction to MozBackup...so, I thought why bother my directory if app was not as expected. App appears to be quite well written and friendly. I became aware of MozBackup via my Security product forum. Sometimes updates to FF or updates/upgrades to my Security product would pose a minor temporary glitch until my Security product issued a fix update. A forum contributor posted useful info about MozBackup and how helpful the app is with a FF re-install ~ that would sometimes resolve the minor glitch. Do you think I should reach out to Pavel Cvrcek or support@secunia.com re this issue ? Thanks again, bjm- I really like your signature "consilio et animis" Vista Home IE8, FF |
||||||||
|
|||||||||
| Anthony Wells | RE: MozBackup 1.x | ||||||||
|
18th Jul, 2010 13:15 | ||||||||
| Score: 2324 Posts: 3,203 User Since: 19th Dec 2007 System Score: N/A Location: N/A Last edited on 18th Jul, 2010 13:16 |
Hello bjm and Fred , This problem occurs on occasions when the product updates but the file Secunia uses in it's detection rules does not update ; also bear in mind that the file in the "installation path" may also not be the file Secunia uses to detect the version - this was a cause of a lot of the earlier Forum threads concerning Adobe Reader . If 1.4.9.0. and 1.4.10. are currently secure (no vulnerabilities known/reported) there is no problem as it stands ; but if 1.4.9.0. became insecure and 1.4.10. was still safe and the rules are not updated then you would get a "false positive" reading for 1.4.10. Secunia would need an file they can read with the up to date version number and which changes with every update (?!) to have a set/fixed rule ; or they need to be advised by the supplier which files in the next "secure" update carry the "latest version number. Depending on the complexity of the programme , a "simple" update of the version # of the .exe file (if indeed that is the file used by Secunia) in every instance could solve the problem for the future ; as of now , you could (just) send the data of a "readable" file (perhaps a .dll) with the up to date version number 1.4.10. to Secunia via the "suggest a program" link at the the bottom of some of the PSI tabs . If it it were me , I'd check it out with both Secunia support and Pavel Cvrcek . Hope this helps . Take care Anthony PS: love these long posts :)))) -- It always seems impossible until its done. Nelson Mandela |
||||||||
|
|||||||||
| bjm__ | RE: MozBackup 1.x | ||||||||
|
18th Jul, 2010 17:39 | ||||||||
| Score: 64 Posts: 374 User Since: 9th Mar 2009 System Score: 100% Location: US |
Good day Anthony Wells, et al suggest a program ~ Done email to Pavel Cvrcek ~ Done email to secuniasupport ~ Done Thanks for your interest... I was unsure, if I should trouble the Forum, the Author or Secunia re this apparently minor benign anomaly. I did wish to enhance my understanding ...and as always the Secunia Community graciously offered me support. Thank you Fred & Anthony & et al Respectfully bjm- |
||||||||
|
|||||||||
| This user no longer exists | RE: MozBackup 1.x | ||||||||
|
19th Jul, 2010 09:11 | ||||||||
| Hi, As has been said in this thread, the PSI depends on file version information, to determine the version it shows you in the interface. As was correctly guessed, the issue is caused by file information in the MozBackup.exe not being updated. This information still indicates version 1.4.9.0. There are not any files with the proper version info bundled with this program. Since this problem does not cause any problems with secure/insecure versions, it should be safe to ignore. If you feel strongly about correct version info, I suggest you contact the vendor, as this issue is rather out of our hands. hope this helps. |
|||||||||
|
|||||||||
| bjm__ | RE: MozBackup 1.x | ||||||||
|
19th Jul, 2010 15:47 | ||||||||
| Score: 64 Posts: 374 User Since: 9th Mar 2009 System Score: 100% Location: US Last edited on 19th Jul, 2010 15:49 |
@ Emil R. Petersen Secunia PSI Support Vendor contacted as per your post. Thanks to all... bjm- |
||||||||
|
|||||||||
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |