Relating to this vendor:
And, this specific program:
|James Andrews||cURL 7x,,,,, HUH???|
|8th Apr, 2011 21:17|
User Since: 5th Jul, 2008
System Score: N/A
Last edited on 8th Apr, 2011 21:18
Secunia says that I need to update some program named "cURL"...
I know nothing about this program and when Secunia sends me to the update site, I don't have a clue about what I am seeing nor what to do...
Jim Andrews - Phoenix
|mogs||RE: cURL 7x,,,,, HUH???|
|8th Apr, 2011 21:58|
User Since: 22nd Apr 2009
System Score: 100%
I don't have any answer for you other than the link to the following thread on the forum where there is discussion about the problem :-
http://secunia.com/community/forum/thread/show/802... it may be that you'll be able to glean something from it.
Secunia Support are most often busy elsewhere at present....and of course the weekend is now with us, else the situation may have been clarified before now.
Hope it's of some help.......regards,
|Maurice Joyce||RE: cURL 7x,,,,, HUH???|
|8th Apr, 2011 22:07|
User Since: 4th Jan 2009
System Score: N/A
|FINDING A FILE PATH
From the DASHBOARD page click on SCAN RESULTS.
1. This will list all your programmes with a + to the left of each one.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Highlight it then copy (CTRL+C) then paste (CTRL+V)) that path back to the Forum.
OR THIS METHOD WHICH GIVES A HELPER MORE INFORMATION
4a Below DETECTED INSTANCES you will see You can double click this row for additional information & options>double click it>a box will appear>click TROUBLESHOOT REPORT>Now highlight the information revealed from START to END & copy it (CTRL+C) then post it to the Forum (CTRL+V)
The end result U post to the Forum should look like this:
Apple iTunes 10.x
C:\Program Files\iTunes\iTunes.exe, version: 10.1.2.17
Last System Scan (localtime):
3. Mar 2011, 16:47
Microsoft Windows XP Home Edition, Service Pack 3
Update 9 09:33 13/03/2011
Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
|amazon13||RE: cURL 7x,,,,, HUH???|
|11th Apr, 2011 00:34|
User Since: 30th Mar 2008
System Score: 99%
| I took a leap of faith and went to this website and decided to download the recommended version for my computer and it appears to have worked for the 64 Bit version I would use. I believe that this has something to do with the foxit reader, do you have this program installed on your computer? Check out the following site to see if there's anything on it that might help you, there's a lot of reading to do in order to figure out what applies to you and your system.
If so it has to do with it, I downloaded it, installed it and the insecure warning went away. Since I installed the one for 64 Bit programs it didn't remove the warning for the 32 Bit programs that is the warning in Secunia that popped up. I clicked on the link for the ADD/Remove in the link in Secunia and was taken their but wasn't sure as to which foxit 32 bit program it was referring to therefore I left it there as to not screw up anything before I find out exactly which foxit listing it's referring to.
"C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\OnDemandCM\curl\curl.exe 220.127.116.11 Insecure Actual Installation 1302473282 "
I will eventually figure it out and take out the 32 bit version, but until then I'll settle for the 99% system score. Hope this helps!
|institut1||RE: cURL 7x,,,,, HUH??? / I think this is it|
|13th Apr, 2011 09:35|
User Since: 21st Aug 2008
System Score: N/A
|I clicked on the 'install solution' and at the www site clicked on the 'download wizard', scrolled to the near bottom of the alpha list to Windows 32 - Generic. There is a file under Windows 32/XP Binary.
As it states at the very bottom of the list that 7.21.4 is trhe latest version as highlighted, I downloaded / saved the Windows 32/XP Binary version, but did not unzip or install it.
Note: While Secunia says the latest is 7.21.2, the site says it is 7.21.4'
Can someone please advise if this is the correct download before I install it, and do I have to delete the older version after the download..
|This user no longer exists||RE: cURL 7x,,,,, HUH???|
|13th Apr, 2011 09:58|
As cURL is part of another program in this case, we have removed the detection in this case. If you run a full rescan, it should be detected.
The reason we don't show this as insecure even though the problem does not bundle the latest reason is that there is no demonstrated attack vector and no offical patches.
Hope this helps.
Not a customer already?
Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance.