navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: MozBackup 1.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
bjm__ MozBackup 1.x
Member 16th Jul, 2010 23:01
Ranking: 64
Posts: 374
User Since: 9th Mar, 2009
System Score: 100%
Location: US
Last edited on 16th Jul, 2010 23:02

Hello Community
Installed MozBackup-1.4.10-EN today... (no prior ver installed)
C:\Users\BJM\Downloads\MozBackup-1.4.10-EN\MozBack up-1.4.10-EN\MozBackup.exe

PSI reports after reboot and rescan
MozBackup 1.x 1.4.9.0

MozBackup 1.4.10 released > December 13th, 2009

Should PSI report MozBackup 1.x 1.4.9.0 or 1.4.10 ?

Thanks
bjm-


Post "RE: MozBackup 1.x" has been selected as an answer.
thedillpickl RE: MozBackup 1.x
Contributor 17th Jul, 2010 00:00
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi bjm;

If you look in its folder, is there more than one version of the file PSI is pointing to?

Sounds a bit odd, but MozBackup must have installed an old file or something.

Just a thought.


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0
bjm__ RE: MozBackup 1.x
Member 17th Jul, 2010 10:28
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
the data posted to my original post is copy / paste from PSI UI.

MozBackup is not installed to C:/ProgramFiles/

MozBackup application was downloaded / saved to my Downloads Folder...app is run from Downloads via Desktop shortcut...

the application.exe was named with the download / save as 1.4.10
so, PSI reports ...
Installation Path
C:\Users\BJM\Downloads\MozBackup-1.4.10-EN\MozBack up-1.4.10-EN\MozBackup.exe
&
Version Detected ...
1.4.9.0


Was this reply relevant?
+0
-0
thedillpickl RE: MozBackup 1.x
Contributor 17th Jul, 2010 16:00
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi bjm;

If I'm reading correctly, MozBackup.exe doesn't install anything, it is the program, with no associated files? Also you have left it in your download folder and the desktop shortcut points to it there.

You said:
"PSI reports after reboot and rescan
MozBackup 1.x 1.4.9.0

MozBackup 1.4.10 released > December 13th, 2009
"

Does this mean PSI is detecting two versions?

Tried to view MozBackup's install/usage instruction. Found the site OK. Couldn't find install instructions or what files you're supposed to have.

Would it be OK to delete the folder and try a fresh install?


Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+0
-0
bjm__ RE: MozBackup 1.x
Member 17th Jul, 2010 18:35
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 17th Jul, 2010 19:06
Good day & thanks for your reply

http://mozbackup.org/
Download MozBackup 1.4.10 Stable
I pulled ZIP version (no install) from http://mozbackup.org/
saved to Downloads - export Backup to Documents - import from Documents
-------------------------------------------------- --------
mirror for > install program or ZIP version (no install)
http://mozbackup.jasnapaka.com/
December 13th, 2009
MozBackup 1.4.10 released! This version comes with some bugfixes. See Changelog, Download.

http://mozbackup.jasnapaka.com/download.php
mirror download sites >
Download from SourceForge: install program, ZIP version (no install)
Download from JasnaPaka.com: install program, ZIP version (no install)
-------------------------------------------------- ----------------
try 0ne or all Five file links....each link upon "Save File" renders > MozBackup-1.4.10-EN
-------------------------------------------------- ----
http://kb.mozillazine.org/MozBackup
MozBackup is a standalone utility (for Windows only) rather than an extension
-------------------------------------------------- -
(this is dated but, essentially identical for 1.4.10 with FF3.6.6)
http://www.howtogeek.com/howto/2418/backup-your-mo...
----------------------------------------
Screenshot for user account BJM & user account BJMS as their FF Profile is not identical
BJM user account
http://a.imagehost.org/0701/MozBack_for_BJM.png
&
BJMS user account
http://j.imagehost.org/0296/MozBackup_for_BJMS.png
-------------------------------------------------- ---------------
http://techdows.com/2010/03/backup-and-restore-fir...
-------------------------------------------------- -------------
FAQ's & Instructions re MozBackup
http://mozbackup.jasnapaka.com/support.php
with regard to specific app Install Instructions ... only issue I read somewhere was updates are not overwritten...they're new install
this is my initial use of the app and it's just so darn simple ... maybe this version makes it so simple...the Wizard offers all one needs to know.
Thanks again and excuse the very very long post
Cheers
bjm-
Was this reply relevant?
+0
-0
thedillpickl RE: MozBackup 1.x
Contributor 17th Jul, 2010 21:42
Score: 376
Posts: 872
User Since: 3rd May 2009
System Score: 100%
Location: US
Hi bjm;

Couldn't find the info I was looking for but mozbackup.org was more help than the jasnapaka (the one I found earlier).

To cut to the chase: I've downloaded the latest version to see what's up and have found the same thing to be true on my machine. MozBackup version 1.4.10 installs mozbackup.exe version 1.4.9.0, date 12/13/2009 . The versions don't have to match, but it is considered good practice.

PSI reports the version of the .exe file not the download. Until MozBackup updates the version number it will stay the same. PSI reports 1.4.9.0 as patched, so no problem there. To get the program version and executable version numbers to match you would have to get in touch with Pavel Cvrcek.

In my test download, the install wizard placed it "C:\program files\MozBackup\ . It is fine to place yours in the download folder as long as you remember it is there. Also the install did have all the usual extra files. Never found specifications on what files are supposed to be in the download package.

No problem with post length, I love the long ones :) (sarcasm intended). This was weird though, I'll give you that.


Take care;

Fred

--
XP Home
Chrome, Firefox, IE8
--
consilio et animis
Was this reply relevant?
+2
-0
bjm__ RE: MozBackup 1.x
Member 18th Jul, 2010 01:48
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 18th Jul, 2010 01:54
Hello thedillpickl
Appreciate your time and confirmation. I was aware as to the secure status...was just that I can usually find a simple explanation for a PSI reporting anomaly & the time that this version has been available...was just unusual to see a reporting anomaly.
I saved it to Downloads as I this was my initial introduction to MozBackup...so, I thought why bother my directory if app was not as expected. App appears to be quite well written and friendly. I became aware of MozBackup via my Security product forum. Sometimes updates to FF or updates/upgrades to my Security product would pose a minor temporary glitch until my Security product issued a fix update.
A forum contributor posted useful info about MozBackup and how helpful the app is with a FF re-install ~ that would sometimes resolve the minor glitch.
Do you think I should reach out to Pavel Cvrcek or support@secunia.com re this issue ?
Thanks again,
bjm-
I really like your signature "consilio et animis"
Vista Home IE8, FF
Was this reply relevant?
+0
-0
Anthony Wells RE: MozBackup 1.x
Expert Contributor 18th Jul, 2010 13:15
Score: 2463
Posts: 3,348
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Jul, 2010 13:16
Hello bjm and Fred ,

This problem occurs on occasions when the product updates but the file Secunia uses in it's detection rules does not update ; also bear in mind that the file in the "installation path" may also not be the file Secunia uses to detect the version - this was a cause of a lot of the earlier Forum threads concerning Adobe Reader .

If 1.4.9.0. and 1.4.10. are currently secure (no vulnerabilities known/reported) there is no problem as it stands ; but if 1.4.9.0. became insecure and 1.4.10. was still safe and the rules are not updated then you would get a "false positive" reading for 1.4.10.

Secunia would need an file they can read with the up to date version number and which changes with every update (?!) to have a set/fixed rule ; or they need to be advised by the supplier which files in the next "secure" update carry the "latest version number. Depending on the complexity of the programme , a "simple" update of the version # of the .exe file (if indeed that is the file used by Secunia) in every instance could solve the problem for the future ; as of now , you could (just) send the data of a "readable" file (perhaps a .dll) with the up to date version number 1.4.10. to Secunia via the "suggest a program" link at the the bottom of some of the PSI tabs .

If it it were me , I'd check it out with both Secunia support and Pavel Cvrcek .

Hope this helps .

Take care
Anthony

PS: love these long posts :))))

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+2
-0
bjm__ RE: MozBackup 1.x
Member 18th Jul, 2010 17:39
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Good day Anthony Wells, et al

suggest a program ~ Done
email to Pavel Cvrcek ~ Done
email to secuniasupport ~ Done

Thanks for your interest... I was unsure, if I should trouble the Forum, the Author or Secunia re this apparently minor benign anomaly.

I did wish to enhance my understanding ...and as always the Secunia Community graciously offered me support.

Thank you Fred & Anthony & et al

Respectfully
bjm-
Was this reply relevant?
+1
-0
This user no longer exists RE: MozBackup 1.x
Member 19th Jul, 2010 09:11
Hi,

As has been said in this thread, the PSI depends on file version information, to determine the version it shows you in the interface. As was correctly guessed, the issue is caused by file information in the MozBackup.exe not being updated. This information still indicates version 1.4.9.0. There are not any files with the proper version info bundled with this program.

Since this problem does not cause any problems with secure/insecure versions, it should be safe to ignore. If you feel strongly about correct version info, I suggest you contact the vendor, as this issue is rather out of our hands.

hope this helps.
Was this reply relevant?
+0
-0
bjm__ RE: MozBackup 1.x
Member 19th Jul, 2010 15:47
Score: 64
Posts: 374
User Since: 9th Mar 2009
System Score: 100%
Location: US
Last edited on 19th Jul, 2010 15:49
@ Emil R. Petersen
Secunia PSI Support

Vendor contacted as per your post.
Thanks to all...
bjm-
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+