• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Download VulnDetect Installer
  • Login
SecTeer VulnDetect & PatchPro Support Forum VulnDetect
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Download VulnDetect Installer
  • Login

[Solved] KeePass - Alter Version Number

Scheduled Pinned Locked Moved Solved Detection Issues
version-numberapp-detection
5 Posts 2 Posters 1.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • O Offline
    OLLI_S Community Moderator
    last edited by OLLI_S 8 Sept 2018, 21:44

    KeePass is detected correctly on my system, also the detected version number 2.39.1.0 is correct.
    But the displayed version number in the app is 2.39.1 so you should show the same version number.
    Tell me if you need a screen shot of the Help -> About window.


    Here the information extracted from the EXE file:

    File name and path:     C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
    Product Name:           KeePass
    Internal Name:          KeePass.exe
    Original Filename:      KeePass.exe
    
    File Description:       KeePass
    Company:                Dominik Reichl
    Legal Copyright:        Copyright © 2003-2018 Dominik Reichl
    Legal Trademarks:       
    Comments:               KeePass Password Safe
    
    File Version String:    2.39.1.0
    File Version:           2.39.1.0
    Product Version String: 2.39.1.0
    Product Version:        2.39.1.0
    
    1 Reply Last reply Reply Quote 0
    • O Offline
      OLLI_S Community Moderator
      last edited by 22 Sept 2018, 08:28

      Meantime I installed KeePass version 2.40.
      In KeePass the displayed version number is 2.40.
      In VulnDetect the displayed version number is 2.40.0.0.


      Here the information extracted from the EXE file:

      File name and path:     C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
      Product Name:           KeePass
      Internal Name:          KeePass.exe
      Original Filename:      KeePass.exe
      
      File Description:       KeePass
      Company:                Dominik Reichl
      Legal Copyright:        Copyright © 2003-2018 Dominik Reichl
      Legal Trademarks:       
      Comments:               KeePass Password Safe
      
      File Version String:    2.40.0.0
      File Version:           2.40.0.0
      Product Version String: 2.40.0.0
      Product Version:        2.40.0.0
      
      1 Reply Last reply Reply Quote 0
      • T Offline
        Tom VulnDetect Team Member
        last edited by 22 Sept 2018, 09:28

        @OLLI_S You are too fast 🙂
        The reason is that KeePass 2.40 is new and is detected by a Generic Rule, Generic Rules are largely accurate, but subtleties such as version numbers are displayed as is.
        Not until we had time to review the new version will we change it to 2.40 as is used on the website and changelogs.
        I suppose we should consider to indicate this in a way that is more clear.

        All unknown versions that are detected by a Generic Rule are automatically added to a list for manual review and approval of a Specific Rule, which will be more accurate.

        Btw. we've closed for processing of inspections for a few minutes, so don't expect to see new results in the UI before 30 minutes from now (there is a big queue) - and yes, I did add a Specific Rule for KeePass 2.40

        /Tom
        Download the latest SecTeer VulnDetect agent here:
        https://vulndetect.com/dl/secteerSetup.exe

        1 Reply Last reply Reply Quote 0
        • O Offline
          OLLI_S Community Moderator
          last edited by 28 Sept 2018, 17:52

          he version number 2.40 is now displayed correctly.
          Issue solved!

          @Tom This is why i suggested to mark all these new versions (where you have generic rules) with the New Status "Under Review"

          T 1 Reply Last reply 28 Sept 2018, 18:56 Reply Quote 0
          • T Offline
            Tom VulnDetect Team Member @OLLI_S
            last edited by 28 Sept 2018, 18:56

            @olli_s Yes, we should consider indicating this in some way

            /Tom
            Download the latest SecTeer VulnDetect agent here:
            https://vulndetect.com/dl/secteerSetup.exe

            1 Reply Last reply Reply Quote 0
            1 out of 5
            • First post
              1/5
              Last post
            Download SecTeer Personal VulnDetect - an alternative to the long lost Secunia PSI

            Please see our Privacy and Data Processing Policy
            Sponsored and operated by SecTeer | VulnDetect is a replacement for the EoL Secunia PSI
            Forum software by NodeBB