Forum Thread: SecuniaPSI detected Lhaplus version 1.57 is insecure.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
And, this specific program:
Lhaplus 1.x

This thread has been marked as locked.
haruyama SecuniaPSI detected Lhaplus version 1.57 is insecure.
Member 23rd May, 2010 03:31
Ranking: 0
Posts: 3
User Since: 23rd May, 2010
System Score: N/A
Location: JP
Last edited on 23rd May, 2010 03:32

When I installed Lhaplus version 1.57 and scaned with Secunia PSI,
Secunia PSI showed "This installation of Lhaplus is insecure ...".

Installation Path: C:\opt\Lhaplus\Lhaplus.exe
The version Detected: 1.5.7.0.

Maurice Joyce RE: SecuniaPSI detected Lhaplus version 1.57 is insecure.
Handling Contributor 23rd May, 2010 09:35
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 23rd May, 2010 10:52
Secunia are reporting there are no vulnerabilities if all the vendor patches are applied.

On that basis, I think version 1.57 (I cannot find a later version)is secure but U have remnants of a previous version. I would:

Download & save version 1.57 to desktop.

Go to add remove & uninstall all instances of the programme.

Reboot & rescan with PSI.

If there is still a vulnerability what is the path?

If there are no vulnerabilities reinstall from the saved desktop file.

Rescan with PSI - Is it showing as secure?

Delete the desktop install file.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-1
haruyama RE: SecuniaPSI detected Lhaplus version 1.57 was insecure.
Member 23rd May, 2010 13:29
Score: 0
Posts: 3
User Since: 23rd May 2010
System Score: N/A
Location: JP
Last edited on 23rd May, 2010 13:29
> Download & save version 1.57 to desktop.
> Go to add remove & uninstall all instances of the programme.
> Reboot & rescan with PSI.
> If there is still a vulnerability what is the path?

There is no insecure program.

> If there are no vulnerabilities reinstall from the saved desktop file.
> Rescan with PSI - Is it showing as secure?

SecurePSI detected Lhaplus 1.x was insecure.

Version Detected: 1.5.7.0
Installation Path : C:\opt\Lhaplus\Lhaplus.exe
Windows Vista 32bit.
Was this reply relevant?
+0
-0
Maurice Joyce RE: SecuniaPSI detected Lhaplus version 1.57 is insecure.
Handling Contributor 23rd May, 2010 14:48
Score: 12325
Posts: 9,575
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Very odd if 1.57 is the most up to date version. I think U have proved U only have 1.57 installed.

Secunia state the latest version is secure.

Perhaps best to wait until tomorrow for a Secunia Official to comment.

In the meantime U could suggest this programme version to them.

--
Maurice

Microsoft Surface 4 Intel i7 64Bit
Windows 10 Pro version 1809 Build 17763.404
16 GB RAM
IE & Edge Only
Was this reply relevant?
+1
-1
haruyama RE: SecuniaPSI detected Lhaplus version 1.57 is insecure.
Member 23rd May, 2010 16:35
Score: 0
Posts: 3
User Since: 23rd May 2010
System Score: N/A
Location: JP
Secure PSI showed
All machines (XP 32bit and Vista 32bit) I have installed Lhaplus 1.57 for
was insecure.

I installed http://www7a.biglobe.ne.jp/~schezo/lpls157.ex e
Was this reply relevant?
+0
-0
This user no longer exists RE: SecuniaPSI detected Lhaplus version 1.57 is insecure.
Member 25th May, 2010 09:13
on 23rd May, 2010 03:31, haruyama wrote:
When I installed Lhaplus version 1.57 and scaned with Secunia PSI,
...
The version Detected: 1.5.7.0.


Hi,

The rule read "1.57", where it should have read "1.5.7". This is now fixed, and a rescan will show you as secure.

Hope this helps.
Was this reply relevant?
+0
-0

This thread has been marked as locked.