Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: unnable to aply the patch

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Flexera Software
And, this specific program:
FlexNet Publisher 11.x

This thread has been marked as locked.
insearch unnable to aply the patch
Member 18th Aug, 2011 20:22
Ranking: 0
Posts: 1
User Since: 20th Oct, 2010
System Score: N/A
Location: N/A
Program Name:
FlexNet Publisher 11.x

Security State:
Insecure

Download Link:
http://www.globes.com/products/utilities/v11.10/lm...

Instances Found:
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe, version: 11.5.0.0

Last System Scan (localtime):
18. Aug 2011, 18:07

Operating System:
Microsoft Windows 7,

---END---

The contents of this report may be helpful for users o

mogs

RE: unnable to aply the patch
[+]
This reply has been minimised due to a negative Relevancy Score.
Anthony Wells RE: unnable to aply the patch
Expert Contributor 18th Aug, 2011 21:59
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Aug, 2011 22:16
Hi ,

There is another Advisory from this month :-

https://secunia.com/advisories/45397/

The solution is to update to version 11.10.02 .

In the posted "Trouble Shoot" report for your version 11.5.0.0 , the download link offered by the PSI is to the installer .exe for version 11.10.02 .

This will patch the vulnerability in the SA45397 and the PSI will show the programme as up to date/patched even though/because the vulnerabilty in SA54615 cannot be patched by you untill a patch is released :ie: you (will) have done all you can :-

https://secunia.com/advisories/45615/

What is the problem/warnings you get when you try to run the installer in the PSI link ??

Anthony

EDIT : here is the download page from the vendor for version 11.10 , where it also directs you to the download page for 11.9.1 .I am not sure which bits you need so you may need customer support if we cannot get the PSI download link to work :-

http://www.globes.com/pages/fnp-licensing/v11.10/l...

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
mogs RE: unnable to aply the patch
Expert Contributor 18th Aug, 2011 22:52
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
Hi Anthony.

Missed that new Advisory...my fault.....found it since. Just a quick question tho'.....shouldn't the new one over-ride the original or at least a reference to the new Advisory be found in the older.........or have I missed something else !!! I'd better have another look !

--
Was this reply relevant?
+6
-5
Anthony Wells RE: unnable to aply the patch
Expert Contributor 18th Aug, 2011 23:13
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 18th Aug, 2011 23:15
Mogs ,

Your posted link is to the "Product Vulnerability Report" which is not in itself an Advisory ; the only two Advisories (ever , since 2003) are very recent and separate ***and are detailed and described in variuos places in the "Report" - one details a patch and one does not , as you will see you also mentoned that in your post .

Some careful (re)reading is in order - *** an Advisory does not cover or override another one , it may cross refer if there is a related vulnerability to both ; it may gruop several vulnerabilities . A patch may refer to one or more vulnerablities in an SA and may cover more than one SA or not -don't "ASSUME" anything .

Happy reading

Anthony

PS : I am "guessing" that the update in question needs a "user name and password" to be installed .

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+4
-1

mogs

RE: unnable to aply the patch
[+]
This reply has been minimised due to a negative Relevancy Score.
Anthony Wells RE: unnable to aply the patch
Expert Contributor 19th Aug, 2011 00:42
Score: 2437
Posts: 3,327
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Not misleading at all , Mogs .

Too late for detais ; lhs of the "Report" is the "Table of Contents" -> item 3 :List of Secunia Advisories(All Time) ->click and scroll down . You already posted the summary displayed on the rhs earlier .

Better leave this clutter now and try to help the OP .

G'nite .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+5
-1
Anselm FlexNet Publisher (was: unnable to aply the patch)
Member 19th Aug, 2011 16:46
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
I wonder that FNPLicensingService.exe version 11.5.0.0 has a size of 637 KB and the installation file of 11.10.0.2 73.692 KB.

FlexNet Publisher seems to be a licensing software, installed together with other programs. I think updating is the mother-software's and not the user's business. If I am right, Secunia PSI should consider it.


--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+2
-0
Niteowl RE: unnable to aply the patch
Member 19th Aug, 2011 19:03
Score: 0
Posts: 3
User Since: 26th Mar 2009
System Score: N/A
Location: N/A
I also had a scan that said Flexnet Publisher was isecure. I clicked on the download solution and a download took place. However, I then received a message that stated this program is seldom downloaded and could harm my computer, so I deleted it. What is Flexnet Publisher and why do I need it? I do not recall ever seeing it before.
Was this reply relevant?
+0
-0
Anselm FlexNet Publisher (was: unnable to aply the patch)
Member 19th Aug, 2011 19:17
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
This http://www.flexerasoftware.com/products/flexnet-pu... ist the link to Flexera Software. Even Malwarebytes and Avira AntiVir reported no infection, I'll keep my fingers away.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
ddmarshall RE: unnable to aply the patch
Dedicated Contributor 19th Aug, 2011 19:21
Score: 1208
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
See more information here: http://en.wikipedia.org/wiki/Flexnet

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0

mogs

RE: unnable to aply the patch
[+]
This reply has been minimised due to a negative Relevancy Score.
Anselm FlexNet Publisher (was: unnable to aply the patch)
Member 19th Aug, 2011 19:32
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
I just found this: http://www.securelist.com/en/advisories/45397 - not very calming. I still have no idea about the very different sizes of the old one .exe file and the new install file. Perhaps Secunia could contact Flexera Software? It seems to be a serious issue.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
ddmarshall RE: unnable to aply the patch
Dedicated Contributor 19th Aug, 2011 20:16
Score: 1208
Posts: 961
User Since: 8th Nov 2008
System Score: 98%
Location: UK
There may be more to it than just that executable. Do you have any other Macrovision folders. The installation package (71.9MB) also contains both the 32bit and 64bit versions according to this page.
http://www.globes.com/support/fnp_utilities_downlo...

The SmartScreen filter warning message is explained here:
http://blogs.msdn.com/b/ie/archive/2011/05/17/smar...

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+4
-1
ML1970 RE: unnable to aply the patch
Member 19th Aug, 2011 23:12
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH
I have read all above and am rather confused now.

Running FlexNet Publisher 11.5.0.0 and Secunia PSI tells me that this program was detected as Insecure and that the latest version including one or more security fixes is 11.10.0.2.

From Anthony Wells above I understand that
- the solution is to update to version 11.10.02, and
- in the posted "Trouble Shoot" report for my version 11.5.0.0 , the download link offered by the PSI is to the installer .exe for version 11.10.02

Problem: How do I update from 11.5.0.0 to 11.10.02?

The file downloaded from
http://www.globes.com/support/fnp_utilities_downlo...
does not work. In particular, the installation fails because the selected folder (C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher) is not accepted. It tells me to select another one, but none is accepted.




Was this reply relevant?
+0
-0

Maurice Joyce

RE: unnable to aply the patch
[+]
This reply has been deleted
ML1970 RE: unnable to aply the patch
Member 20th Aug, 2011 03:26
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH
Done and Secunia PSI is back to 100%.

Hope the PC continues to run flawlessly without the deleted file.

Thanks!

Was this reply relevant?
+0
-0
vitvit RE: unnable to aply the patch
Member 20th Aug, 2011 07:36
Score: 1
Posts: 6
User Since: 3rd Oct 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2011 07:37
Can't still install this patch. No matter if the FlexNet folder is deleted or not.
Was this reply relevant?
+1
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 07:44
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Why are U trying to reinstall it? As my post suggests your PC will work without it or do U know something different?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-1
vitvit RE: unnable to aply the patch
Member 20th Aug, 2011 08:18
Score: 1
Posts: 6
User Since: 3rd Oct 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2011 08:18
I need this for running Adobe programs. - Installation failure solved: the file wasn't downloaded completely. But how to use the registration file now (to running the Adobe programs)?
Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 08:27
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 20th Aug, 2011 08:29
Are U suggesting Adobe programmes will not run without FlexNet? If so which one? I have a professional Adobe programme installed & it does not "call on" FlexNet to work.

Adobe "freebie" programmes should not be affected as they use an equal piece of dross ware called NOS as the download manager.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-2
vitvit RE: unnable to aply the patch
Member 20th Aug, 2011 08:32
Score: 1
Posts: 6
User Since: 3rd Oct 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2011 08:33
PhotoShop Extended, InDesign, Illustrator CS3 won't work. I just renamed the Flex*....exe to *.exe.old. Maybe because it is an Education-Version?
Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 08:40
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
By doing that does PSI give U a clean bill of health?

What U describe could be correct - are they standalone versions or issued via an Educational Authority licence?

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-1
vitvit RE: unnable to aply the patch
Member 20th Aug, 2011 08:58
Score: 1
Posts: 6
User Since: 3rd Oct 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2011 08:59
The Adobe programs are issued via an Educational Authority licence (Design Premium).

PSI shows me:

FlexNet Publisher 11.x 1 Insecure 11.3.5.1 11.10.0.2 Install Solution
Detected Instances:
C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe, version 11.3.5.1

Latest Version - patching one or more vulnerabilities: 11.10.0.2

Maybe I can ignore this in this case?
Was this reply relevant?
+0
-0
Anselm FlexNet Publisher (was: unnable to aply the patch)
Member 20th Aug, 2011 09:13
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
Last edited on 20th Aug, 2011 09:13
Could somebody please tell me the size of FNPLicensingService.exe

- version 11.5.0.0
- version 11.10.0.2

Thank you.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 09:14
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Are we going slightly off piste here?

Does your Adobe programmes now work having renamed them _OLD?

Clearly PSI are giving them a clean bill of health.

Are U now suggesting your latest find of

C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe, version 11.3.5.1 is somehow connected to Adobe products?

I would not create an ignore rule for any vulnerability. Better to find the cause & fix it.


--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-1
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 09:26
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Anselm

Should be about 848KB.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-1
Anselm FlexNet Publisher (was: unnable to aply the patch)
Member 20th Aug, 2011 09:53
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 20th Aug, 2011 09:26, Maurice Joyce wrote:
@Anselm

Should be about 848KB.

Both versions? I don't understand why the install file of 11.10.0.2 has a size of 73.692 KB.

Unfortunately I don't know which software installed the FlexNet Publisher. If I would know it I would have some questions to the software manufacturer.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
ML1970 RE: unnable to aply the patch
Member 20th Aug, 2011 10:03
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH
@ Maurice and vitvit

vitvit is right, some Adobe programs - e.g. Adobe Premiere Elements 7 - don't work after deleting the 11.5.0.0 file

Good news: Did reinstall Premiere Elements and it runs again.

Bad news: 11.5.0.0 is here again and Secunia PSI score down to 99%.

So the question remains: How do I update from 11.5.0.0 to 11.10.02?

As mentioned before, the file downloaded from
http://www.globes.com/support/fnp_utilities_downlo...
does not work. In particular, the installation fails because the selected folder (C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher) is not accepted. It tells me to select another one, but none is accepted.

Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 10:06
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Do U mean 73.692 MB not KB?

If U want a precise answer check the properties of your current version installed. Any update should match that + or - a few KB.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-1
Anselm RE: unnable to aply the patch
Member 20th Aug, 2011 10:14
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 20th Aug, 2011 10:06, Maurice Joyce wrote:
Do U mean 73.692 MB not KB?

If U want a precise answer check the properties of your current version installed. Any update should match that + or - a few KB.

Once more:
My FNPLicensingService.exe has a size of 637 KB
The downloaded lmadmin-i86_n3-11_10_0_2.exe install file has a size of 73.692 KB

I would like to compare with other user's file sizes.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
vitvit RE: unnable to aply the patch
Member 20th Aug, 2011 10:17
Score: 1
Posts: 6
User Since: 3rd Oct 2009
System Score: N/A
Location: N/A
Last edited on 20th Aug, 2011 10:18
My (old) FNPLicensingService.exe version has 639 kb. version 11.3.5.1
Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 10:22
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
ML1970

Thank U for that - Adobe Premier Elements 8 & 9 certainly work without FlexNet Publisher being installed. Tried & tested.

Back to the drawing board - I will try to find another solution that works for all users.

I do agree that the download website is very confusing - it does not appear to cater for home users but I will dig around a bit more to see if I can help further.







--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+2
-2
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 11:06
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@Anselm
I have just download the file U suggest from here:

http://www.globes.com/products/utilities/v11.10/lm...

It is saved to desktop. A look at the properties tells me it is 73.9MB in size not KB.

Can U confirm U really mean KB - if so what site did U use?

If it is indeed MB's that is not the file U want hence @ML1970 is reporting hassle installing it.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-1
Anselm RE: unnable to aply the patch
Member 20th Aug, 2011 13:17
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 20th Aug, 2011 11:06, Maurice Joyce wrote:
It is saved to desktop. A look at the properties tells me it is 73.9MB in size not KB.

Can U confirm U really mean KB - if so what site did U use?

If it is indeed MB's that is not the file U want hence @ML1970 is reporting hassle installing it.

A plain text screenshot of my program and install (download) folders:

C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher

fnp_registrations. xml 1 KB XML-Dokument 14.08.2010 10:38
FNPLicensingService.exe 637 KB Anwendung 11.08.2010 14:53

C:\Install\FlexNet Publisher

Irnadrnin-i86_n3-11_10_0_2.exe 73.692 KB Anwendung 20.08.2011 09:08

Perhaps the thousands separators (./,) cause the confusion?

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
Maurice Joyce RE: unnable to aply the patch
Handling Contributor 20th Aug, 2011 14:11
Score: 11726
Posts: 8,970
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Thank you. After more research I have written to Secunia asking them to comment on this interesting thread for the following reasons:

1. I believe the website they point to for a fix is for Vendors who use InstallShield to package & download their wares.

2. This gives a little of the background:
http://www.mathworks.com/support/tech-notes/1300/1...

which leads to this:

http://www.flexerasoftware.com/resources/trials.ht...

This indicates that InstallShield are not interested in any programme that was packaged by them for download & installation & we should contact the vendor of the programme packaged to update FlexNet.

They appear to have fixed their own vulnerability to vendors.

I have deleted my advice on a fix. Clearly does not work for all users and could be misleading.

Secunia are unlikely to respond until Monday.








--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+4
-1
ML1970 RE: unnable to aply the patch
Member 20th Aug, 2011 14:22
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH
Sounds reasonable. Let's wait and see what Secunia answers on this.

Many thanks for all your efforts!
Was this reply relevant?
+0
-0
Original-Paulie-D RE: FlexNet patch applicability
Member 21st Aug, 2011 08:33
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
This 2011-AUG-16 vulnerability report from Flexera Software may be related to the Secunia warning:
http://www.flexerasoftware.com/pl/13057.htm

Which led me to this page:
http://www.globes.com/support/fnp_utilities_downlo...

Most importantly is the point raised on the aforementioned page under "Helpful Tips":
"End users should contact their software vendor for support. The vendor is the only source for updates to the vendor daemons and applications, and for license file changes."

As the "FNPLicensingService.exe" seems to have been installed by Adobe, at least for the average user, it would seem prudent to seek a resolution from Adobe to patch the sole EXE which resides on my Windows 7 Pro system at:

C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\
Was this reply relevant?
+4
-0
jellison9@yahoo.com RE: unnable to aply the patch
Member 22nd Aug, 2011 04:13
Score: 0
Posts: 1
User Since: 29th May 2010
System Score: N/A
Location: N/A
I got the below also. After clicking on Secunia's "Install Solution" link and installing it, when I rescan in Secunia the Flexinet Publisher item, it still reads the same version number it did before, and it still says insecure. For what it's worth also got a 73 MB download for the fix. During the installation process it wanted to install it as a server process on port 8080. I don't like having services like that running open on my machine, but I didn't know what else to do so I let it install that way. Task manager doesn't show it coming up after reboot and running though. That might be for the best. Hard to tell. It's looking sort of sticky.


---START---

Program Name:
FlexNet Publisher 11.x

Security State:
Insecure

Download Link:
http://www.globes.com/products/utilities/v11.10/lm...

Instances Found:
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe, version: 11.3.5.1

Last System Scan (localtime):
20. Aug 2011, 19:43

Operating System:
Microsoft Windows Vista,

---END---
Was this reply relevant?
+0
-0
Anselm RE: unnable to aply the patch
Member 22nd Aug, 2011 08:33
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 21st Aug, 2011 08:33, Original-Paulie-D wrote:
Most importantly is the point raised on the aforementioned page under "Helpful Tips":
"End users should contact their software vendor for support. The vendor is the only source for updates to the vendor daemons and applications, and for license file changes."

That's what I supposed. Unfortunately I don't know which software installed the FlexNet Publisher. Now I renamed the FNPLicensingService.exe. This should fix the vulnerability and show which program refuses to work.


--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+1
-0
M.Hansen RE: unnable to aply the patch
Secunia Official 22nd Aug, 2011 09:03
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Hi

According to the vendor this is the update procedure:

NOTE: This Hot Fix must be applied to lmadmin version 11.10. If you are using an older version of lmadmin, you must replace it with version 11.10, and then apply this hotfix.

1. Extract the file lmadmin.exe from the archive.
2. Locate the folder in which lmadmin version 11.10 and its associated files were installed.
The default location is C:\Program Files\FLEXnet Publisher License Server Manager
3. Replace the file lmadmin.exe in that folder with the new lmadmin.exe file that you extracted from the archive.
jbode63 RE: unnable to aply the patch
Member 22nd Aug, 2011 11:27
Score: 0
Posts: 2
User Since: 26th Jun 2009
System Score: N/A
Location: N/A
hmmm, can't find that hotfix you're describing.

So I checked with "lmadmin -version" the version the (what ever it is good for) software is on. The result: 11.10.0.2 (build 96281) ...
Nonetheless my PSI is claiming I have the version 11.3.5.1 installed - not finding the new version (in case I have installed to a different folder etc.).

:) I want my 100% back - thanks!

Jörg
Was this reply relevant?
+0
-0
ML1970 RE: unnable to aply the patch
Member 22nd Aug, 2011 12:02
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH
@ M.Hansen: Thank you.

What does that mean for the average user?
In particular, as to step 1 "Extract the file lmadmin.exe from the archive.": What archive is that and where can I find it?

The Hotfix you refer to is the one to be found on: http://www.globes.com/support/fnp_utilities_downlo...

Correct?




Was this reply relevant?
+0
-0
M.Hansen RE: unnable to aply the patch
Secunia Official 22nd Aug, 2011 12:51
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
Last edited on 22nd Aug, 2011 12:51
Hi again.


I've updated our rules to include the version information for the lmadmin.exe file.

I also noted that in order to be able to successfully run the installer, the user may have to select "Run as administrato", if the user is not an administrator.

Please apply the patch and perform a full scan with the PSI and see if the problem has been solved.
SDA1 RE: unnable to aply the patch
Member 22nd Aug, 2011 13:18
Score: 1
Posts: 8
User Since: 11th Feb 2009
System Score: 100%
Location: DK
Worked for me this time after several tries this morning. Back on 100% after full scan and Adobe Reader and Adobe Photoshop Elements works again. Noted a little PSI box during installation saying "insecure 11.x removed". Thanks...:)

--
Secunia PSI Tray Version 2.0.0.1003
Windows XP SP3
Was this reply relevant?
+0
-0
jbode63 RE: unnable to aply the patch
Member 22nd Aug, 2011 13:40
Score: 0
Posts: 2
User Since: 26th Jun 2009
System Score: N/A
Location: N/A
Thanks, the message has been resolved. I'm on clear 100% again.

Jörg
Was this reply relevant?
+0
-0
Niteowl RE: unnable to aply the patch
Member 22nd Aug, 2011 19:49
Score: 0
Posts: 3
User Since: 26th Mar 2009
System Score: N/A
Location: N/A
Mr. Hansen. I'm at a total loss...you guys are way above my computer knowledge level. I'm still unsure what to do to update my insecure Flexnet Publisher 11.3.5.1. When I opened the PSI install solution just a minute ago, I got the same option as last week, i.e., to install a 70+MB -program where a 640KB program now exists. Also, I keep seeing references in this thread to inadmin...versions and I don't see any imadmin in my Macrovison Shared folder - only fnp_registrations and FNPLicensingService. Since the registrations file shows only Adobe (Ido have Adobe Acrobat 8 and, of course, Adobe Reader), should I perhaps delete the FNP folder and Adobe Reader and reinstall Adobe Reader again? Please advise. Thanks.
Was this reply relevant?
+0
-0
ML1970 RE: unnable to aply the patch
Member 22nd Aug, 2011 20:53
Score: 0
Posts: 13
User Since: 17th Jul 2010
System Score: 100%
Location: CH

That worked.

Was running 11.5.0.0 before.
Applying the suggested solution (i.e. the downloaded file called lmadmin-i86_n3-11_10_0_2) as administrator finally worked.
Full rescan detected version 11.10.0.2 and shows a score of 100%.

Many thanks for all your efforts!






Was this reply relevant?
+0
-0
Keeze RE: unnable to aply the patch
Member 22nd Aug, 2011 22:41
Score: 2
Posts: 1
User Since: 22nd Aug 2011
System Score: N/A
Location: N/A
Ok, I think that there are two groups of users. Those who run the server version of the software and those who are running the client part of the software (installed bij Adobe). Over here the software is also installed bij Adobe (Photoshop Elements and Premiere Elements).

The solution that worked for me was running the Licence repairtool from Adobe: http://www.adobe.com/support/contact/licensing.htm...

PSE/PE kept working and after a full rescan by PSI the score is 100% again.
Weird part is that after the scan the program seems to be completely vanished from the list in PSI....
Was this reply relevant?
+2
-0
This user no longer exists RE: unnable to aply the patch
Member 22nd Aug, 2011 23:48
I'm fairly good at patching vulnerabilities, but didn't understand your post at all. Having said that, I downloaded the fix once more and must have done something different this time vs. whatever I did or didn't do over the weekend because the patch worked and I'm back to 100%. Also, whatever the vulnerability was, my Kaspersky Internet Security 2011 didn't particularly like the fix--kept getting warning messages.

I'm running Windows XP Professional, SP3
Was this reply relevant?
+0
-0
applepie RE: unnable to aply the patch
Member 23rd Aug, 2011 02:09
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US
on 22nd Aug, 2011 22:41, Keeze wrote:
Ok, I think that there are two groups of users. Those who run the server version of the software and those who are running the client part of the software (installed bij Adobe). Over here the software is also installed bij Adobe (Photoshop Elements and Premiere Elements).

The solution that worked for me was running the Licence repairtool from Adobe: http://www.adobe.com/support/contact/licensing.htm...

PSE/PE kept working and after a full rescan by PSI the score is 100% again.
Weird part is that after the scan the program seems to be completely vanished from the list in PSI....


That seemed to work. But where did Flexnet go? Dont see it anymor in SecuniaPSI. Is the risk still there? Can anybody from Secunia answer this question?
Was this reply relevant?
+1
-0
M.Hansen RE: unnable to aply the patch
Secunia Official 23rd Aug, 2011 08:53
Score: 188
Posts: 410
User Since: 26th Jan 2009
System Score: N/A
Location: Copenhagen, DK
If the FlexNet Publisher software is no longer on the Secunia PSI Scan Results Page after running the Adobe License Repair Tool, please check if these two files are present i the FlexNet Publisher folder:

FNPLicensingService.exe - Main file, used to detect the program.
LMADMIN.EXE - Updated file, used to detect if the latest patch has been applied.
applepie RE: unnable to aply the patch
Member 23rd Aug, 2011 09:20
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US
Last edited on 23rd Aug, 2011 09:41
on 23rd Aug, 2011 08:53, M.Hansen wrote:
If the FlexNet Publisher software is no longer on the Secunia PSI Scan Results Page after running the Adobe License Repair Tool, please check if these two files are present i the FlexNet Publisher folder:

FNPLicensingService.exe - Main file, used to detect the program.
LMADMIN.EXE - Updated file, used to detect if the latest patch has been applied.



Only these two two files show up:

fnp_registrations.xml
FNPLicensingService.exe File version:11.6.0.1 Size:640KB Date modified:8/22/2011

(Windows shows my previous version of FNPLicensingService.exe before I did the License Repair Tool was 11.3.5.1)

Is this okay or are we still at risk?
Was this reply relevant?
+0
-0
SDA1 RE: unnable to aply the patch
Member 23rd Aug, 2011 09:43
Score: 1
Posts: 8
User Since: 11th Feb 2009
System Score: 100%
Location: DK
After having run the patch yesterday I now have flwg. items in the the FLEXnet Publisher License Server Manager folder:
9 folders
1 textdocument
1 programme IMADMIN fileversion 11.10.0.2 size 6,28MB

Hope somebody fm Secunia can cfm. this to be OK.

Brgds Søren

Running on Windows XP.

--
Secunia PSI Tray Version 2.0.0.1003
Windows XP SP3
Was this reply relevant?
+0
-0
Anselm RE: unnable to aply the patch
Member 23rd Aug, 2011 09:45
Score: 7
Posts: 38
User Since: 7th Jul 2008
System Score: N/A
Location: DE
on 22nd Aug, 2011 19:49, Niteowl wrote:
Mr. Hansen. I'm at a total loss...you guys are way above my computer knowledge level. I'm still unsure what to do to update my insecure Flexnet Publisher 11.3.5.1. When I opened the PSI install solution just a minute ago, I got the same option as last week, i.e., to install a 70+MB -program where a 640KB program now exists. Also, I keep seeing references in this thread to inadmin...versions and I don't see any imadmin in my Macrovison Shared folder - only fnp_registrations and FNPLicensingService. Since the registrations file shows only Adobe (Ido have Adobe Acrobat 8 and, of course, Adobe Reader), should I perhaps delete the FNP folder and Adobe Reader and reinstall Adobe Reader again? Please advise. Thanks.

My status is alike, I'm still confused. I never experienced such a trouble to fix a vulnerability reported by Secunia PSI and I still don't know what to do to update from 11.5.0.0 to 11.10.0.2.

--
Secunia PSI 3.0
Windows 7 Professional 64 Bit SP1
Intel Core i5-2430M CPU 2.4 GHz 8 GB RAM
Was this reply relevant?
+0
-0
SDA1 RE: unnable to aply the patch
Member 23rd Aug, 2011 12:55
Score: 1
Posts: 8
User Since: 11th Feb 2009
System Score: 100%
Location: DK
After my successfull patch yesterday and a full scan, the flwg. is shown under scan results:

Flexnet Publisher 11.x, patched, detected version 11.10.0.2, up-to-date.

Also in the Windows control panel add/remove programs is listed:

FLEXnet Publisher License Server Manager, size 28,24MB

Søren

--
Secunia PSI Tray Version 2.0.0.1003
Windows XP SP3
Was this reply relevant?
+0
-0
applepie RE: unnable to aply the patch
Member 23rd Aug, 2011 18:32
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US
on 23rd Aug, 2011 09:20, applepie wrote:
Only these two two files show up:

fnp_registrations.xml
FNPLicensingService.exe File version:11.6.0.1 Size:640KB Date modified:8/22/2011

(Windows shows my previous version of FNPLicensingService.exe before I did the License Repair Tool was 11.3.5.1)

Is this okay or are we still at risk?



Any new info/answers for this question? Those are the only two files in the Flexnet Publisher folder and Flexnet is not showing in the Secunia PSI.

What's is the security status/risk if this is all we have show in the Flexnet folder?
Was this reply relevant?
+0
-0
Niteowl RE: unnable to aply the patch
Member 23rd Aug, 2011 19:36
Score: 0
Posts: 3
User Since: 26th Mar 2009
System Score: N/A
Location: N/A
I downloaded and ran the Licensing Repair tool from the Adobe URL gien in Keeze's reply of 22 Aug and it worked. It hung up some on "Windows Error Reporting" but finally continued on and completed. When I ran PSI afterward, my score was 100%. BTW, I am using Windows Vista 32 bit.
Was this reply relevant?
+1
-1
applepie RE: unnable to aply the patch
Member 25th Aug, 2011 00:29
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US
on 23rd Aug, 2011 09:20, applepie wrote:
Only these two two files show up:

fnp_registrations.xml
FNPLicensingService.exe File version:11.6.0.1 Size:640KB Date modified:8/22/2011

(Windows shows my previous version of FNPLicensingService.exe before I did the License Repair Tool was 11.3.5.1)

Is this okay or are we still at risk?



Please could someone from Secunia answer this question? Please
Was this reply relevant?
+1
-0
E.Jeppesen RE: unnable to aply the patch
Secunia Official 25th Aug, 2011 12:59
Score: 220
Posts: 618
User Since: 24th Nov 2008
System Score: N/A
Location: Copenhagen, DK
Currently FlexNet Publisher 11.x needs to be at version 11.10.0.2 to be patched and secure. Any version lower than this may expose the user to potential security risks.

I understand that FlexNet Publisher 11.x may not be an easy program to patch, however, only the vendor can decide how their program is to be updated. For support to update this program I suggest contacting the vendor for assistance, and while you are at it you may also want to suggest that they provide a more user friendly update procedure.
WarningU2 RE: unnable to aply the patch
Member 25th Aug, 2011 13:18
Score: 6
Posts: 16
User Since: 26th Nov 2008
System Score: N/A
Location: CA
Re adobe programs that need this ... it is my understanding that my Sony eReader uses it in conjunction with Adobe eReader and Adobe Digital Editions (license software). I'm personally leaving this beast alone until Adobe or Sony populates the fix.
Was this reply relevant?
+1
-0
ponyboy RE: unnable to aply the patch
Member 25th Aug, 2011 22:16
Score: 3
Posts: 2
User Since: 25th Aug 2011
System Score: N/A
Location: US
Last edited on 25th Aug, 2011 22:26
Mr. Jeppesen, what part of this (from the Flexera site) is difficult to understand? It has already been pointed out at least once earlier in this thread:

(unknown source)
"End users should contact their software vendor for support. The vendor is the only source for updates to the vendor daemons and applications, and for license file changes."


Flexera says it's up to their licensees to patch, and yet Secunia is telling us to install the app that our third-party vendors should use to fix the vulnerability (in our case, Adobe Acrobat Professional 9 is affected and installs this "vulnerable" application). And here you're also saying we should contact the other vendor ourselves. Could you please pick an official response and follow it through to completion for the sake of your customers? I'm not managing a single computer affected by this supposedly insecure application, I'm managing a network where this particular application is marked as insecure. I'm not keen on installing software so things "just work" - I need to understand why it works the way it does. You want me to install a "License Manager Server" on desktop systems to make them secure? That sounds ridiculous to a seasoned administrator - here, patch one problem by adding more software to the dogpile with no understanding of what it is doing. There is not a single instance of lmadmin.exe on any of our "vulnerable" systems, yet there is after installing this? The fix is a ~70MB file to patch a ~700KB executable? Does none of this strike you as peculiar?

Perhaps Secunia should be the one contacting Adobe. I've contacted both Adobe and Secunia, and neither party has done more than respond with an automated reply. Secunia's response to this issue is seriously eroding my trust as a customer. I (unfortunately) can't chose to do without Adobe's products in my line of work, but I can choose to do without Secunia if this is the typical support response. If Secunia wants to point these things out to their customers, then Secunia should be prepared to contact other vendors on behalf of their customers.
Was this reply relevant?
+3
-0
applepie RE: unnable to aply the patch
Member 25th Aug, 2011 23:54
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US
on 25th Aug, 2011 22:16, ponyboy wrote:
Mr. Jeppesen, what part of this (from the Flexera site) is difficult to understand? It has already been pointed out at least once earlier in this thread:

(unknown source)
"End users should contact their software vendor for support. The vendor is the only source for updates to the vendor daemons and applications, and for license file changes."


Flexera says it's up to their licensees to patch, and yet Secunia is telling us to install the app that our third-party vendors should use to fix the vulnerability (in our case, Adobe Acrobat Professional 9 is affected and installs this "vulnerable" application). And here you're also saying we should contact the other vendor ourselves. Could you please pick an official response and follow it through to completion for the sake of your customers? I'm not managing a single computer affected by this supposedly insecure application, I'm managing a network where this particular application is marked as insecure. I'm not keen on installing software so things "just work" - I need to understand why it works the way it does. You want me to install a "License Manager Server" on desktop systems to make them secure? That sounds ridiculous to a seasoned administrator - here, patch one problem by adding more software to the dogpile with no understanding of what it is doing. There is not a single instance of lmadmin.exe on any of our "vulnerable" systems, yet there is after installing this? The fix is a ~70MB file to patch a ~700KB executable? Does none of this strike you as peculiar?

Perhaps Secunia should be the one contacting Adobe. I've contacted both Adobe and Secunia, and neither party has done more than respond with an automated reply. Secunia's response to this issue is seriously eroding my trust as a customer. I (unfortunately) can't chose to do without Adobe's products in my line of work, but I can choose to do without Secunia if this is the typical support response. If Secunia wants to point these things out to their customers, then Secunia should be prepared to contact other vendors on behalf of their customers.


Hear! Hear!
Was this reply relevant?
+0
-0
Original-Paulie-D RE: unable to aply the patch -- SERVER vs. SERVICE
Member 26th Aug, 2011 03:20
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
on 22nd Aug, 2011 22:41, Keeze wrote:
Ok, I think that there are two groups of users. Those who run the server version of the software and those who are running the client part of the software....


You are correct. I failed to clarify that in my earlier post.

User need to pay special attention to the wording: SERVER vs. SERVICE

In my case, the word "Service" is in the app name: "FNPLicensingService.exe"

Was this reply relevant?
+3
-4
Original-Paulie-D RE: unable to aply the patch -- SERVER vs. SERVICE
Member 26th Aug, 2011 03:20
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
Last edited on 26th Aug, 2011 03:55
on 22nd Aug, 2011 22:41, Keeze wrote:
Ok, I think that there are two groups of users. Those who run the server version of the software and those who are running the client part of the software....


You are correct. I failed to clarify that in my earlier post. Users need to always pay special attention to the wording: SERVER vs. SERVICE

In my case, the word "Service" is in the app name: "FNPLicensingService.exe"

That's what I meant by the wording "average user" in my original post; someone who has inadvertently installed this app.

Unfortunately, I was unable to resolve this issue, using the Adobe Licensing Repair Tool from http://www.adobe.com/support/contact/licensing.htm...

I've since written the vendor at support@flexerasoftware.com for guidance, encouraging them to post an answer in this forum.
Was this reply relevant?
+1
-0
highstream RE: unnable to aply the patch
Member 26th Aug, 2011 07:02
Score: 6
Posts: 29
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
I did the full install of FlexNet Publisher License Service Mgr and then ran a full scan and PSI cleared it.

However, after reading through this thread..

1) I have no idea why I had to install the app, let alone the full thing (home computer/XP), when it wasn't there before as a separate Program Files items, and

2) The file that PSI identified as insecure is still there in the Common Files...>Macrovision subfolder. So what was the point?



Was this reply relevant?
+2
-0
Original-Paulie-D RE: unnable to aply the patch
Member 26th Aug, 2011 07:51
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
Last edited on 26th Aug, 2011 07:52
on 26th Aug, 2011 07:02, highstream wrote:
However, after reading through this thread..

1) I have no idea why I had to install the app, let alone the full thing (home computer/XP), when it wasn't there before as a separate Program Files items, and

2) The file that PSI identified as insecure is still there in the Common Files...>Macrovision subfolder. So what was the point?


Completely agree with your assessment. Some members seem to have reacted to the Secunia PSI warning without any definitive proof as to a proper course of action. While you may have eliminated the particular alert, the software you installed may be (1) unneeded by you, (2) running as as service and thereby consuming resources, and (3) listening on ports.

While some vulnerabilities are at high risk to being compromised, others like this one have a limited scope for penetration and therefore can afford a delay to locate the definitive resolve.

On a somewhat related note, readers may be interested in newsletters from Sans.org as a trusted source for vulnerability reporting. Check it out: http://www.sans.org/newsletters/
Was this reply relevant?
+1
-0
WarningU2 RE: unnable to aply the patch
Member 26th Aug, 2011 14:06
Score: 6
Posts: 16
User Since: 26th Nov 2008
System Score: N/A
Location: CA
Last edited on 26th Aug, 2011 14:18
FYI ... just sharing my research.

http://www.flexerasoftware.com/pl/13057.htm

It appears that Flexnet vendor is going to release a patch for people using the service manager and vendor daemon which (I think) the average user requires. In the meantime you can modify the security settings if you so desire to eliminate the vunerability.

Quote from above URL ... Note the last paragraph. For that I have opened up a case with Adobe referring them to Flexera and this thread.

Remedy (from the Flexera site)
Flexera Software will deliver a hotfix for the FlexNet Publisher v11.10 lmgrd and vendor daemon release as a precautionary measure. This hotfix does not alleviate the need to run lmadmin, lmgrd and vendor daemons in a least privileged security context.

On September 30, 2011, a hotfix will be made available for all FlexNet Publisher v11.10 tier 1 platforms (AIX-PPC(PowerPC)-32 and PPC-64, LSB Linux x86-32 and x86-64, Mac OS X x86-32, x86-64, PPC-32, Microsoft Windows x86-32 and x86-64, Solaris SPARC-32, SPARC-64 and x86-32).

On October 28, 2011, FlexNet Publisher v11.10 tier 2 platforms (HP-UX-RISC-32, RISC-64 and IA(Itanium)-64, LSB Linux PPC-32 and PPC-64, Microsoft Windows IA-64, Red Hat Linux IA-64, SGI-MIPS-64, and Solaris x86-64) will be released with the hotfix included as part of the scheduled release.

Lmgrd and vendor daemons are backwards compatible and therefore we recommend all customers upgrade to the latest release.

Please note that Flexera Software cannot provide the vendor daemons to end users—vendor daemons will need to be provided by software vendors.


I think downloading the full package here as Secunia has recommended is overkill ...I don't profess to be more than a reasonably windows savy person but even I'm beginning to get lost by the thread here. If I have mislead or misunderstood from the above please delete this entry. Anyways I hope the above helps clear the confusion rather than cause more. I'll go and disable the warning for now on this program. A mountain out of a moehill personally if my interpretation is correct. I think you recommended the wrong course of action Secunia if I'm correct.

Was this reply relevant?
+2
-0
johnra RE: unnable to aply the patch
Member 30th Aug, 2011 00:47
Score: 3
Posts: 8
User Since: 27th Feb 2011
System Score: N/A
Location: N/A
I also received the warning from Secunia PSI. I renamed the ... flexnet publisher folder then found that Adobe Dreamweaver CS3 failed to start, so I renamed it correctly again.

I also looked at the massive update suggested and decided to investigate further, so arriving here.

This thread has been very useful, thanks. Is it confirmed that running the Adobe Licencing Repair Tool will upgrade the fnplicensingService.exe file? otherwise I will await advice that Adobe has issued a patch.
Was this reply relevant?
+0
-0
ashla RE: unnable to aply the patch - Use the Adobe License Repair Tool Instead
Member 30th Aug, 2011 00:51
Score: 1
Posts: 1
User Since: 30th Aug 2011
System Score: N/A
Location: US
on 22nd Aug, 2011 22:41, Keeze wrote:
Ok, I think that there are two groups of users. Those who run the server version of the software and those who are running the client part of the software (installed bij Adobe). Over here the software is also installed bij Adobe (Photoshop Elements and Premiere Elements).

The solution that worked for me was running the Licence repairtool from Adobe: http://www.adobe.com/support/contact/licensing.htm...

PSE/PE kept working and after a full rescan by PSI the score is 100% again.
Weird part is that after the scan the program seems to be completely vanished from the list in PSI....


The Adobe License Repair Tool at this link updates the C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe file to 11.6.0.1 of 1/27/2011. Rescans clear it after this application.

I agree that the installation of the lmadmin / Flexera Licensing Manager tool which adds a web portal on your workstation on port 8080 is not only overkill (73MB to 641 KB) but also dangerous - opening up a web port that otherwise would not be present on a workstation.

Perhaps Adobe does need to further update its License Repair Tool to a newer Flexera version of FNPLicensingService, but we don't need recommendations for a greater potential problem from the original Flexera (aka Macrovision / Acresso) vendor.

Was this reply relevant?
+1
-0
Original-Paulie-D RE: unnable to aply the patch
Member 30th Aug, 2011 05:56
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
Last edited on 30th Aug, 2011 06:02
on 26th Aug, 2011 03:20, Original-Paulie-D wrote:
Unfortunately, I was unable to resolve this issue, using the Adobe Licensing Repair Tool from http://www.adobe.com/support/contact/licensing.htm...

I've since written the vendor at support@flexerasoftware.com for guidance, encouraging them to post an answer in this forum.


As an update to my prior post, I wanted to share some additional feedback regarding the Adobe Licensing Repair Tool (ALRT).

Firstly, I have not yet received any reply from Flexera Software support.

The ALRT states it was designed for "Adobe Acrobat 8 and 9, and Creative Suite 3 and 4 products" ... yet I witnessed it impacting Adobe Photoshop CS3 as well (details below).

After running the ALRT, and pressing "N" to continue (which, by the way, seems completely asinine since one would expect to press "Y" at such a prompt), the tool DID update the only two files located at "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\" -- namely "fnp_registratons.xml" and "FNPLicensingService.exe". Previously, both files were dated 6/14/2011 and the EXE's File Version stated 11.3.5.1 with a File Size of 639 KB on my 32-bit Win7 Pro machine. Afterwards, the files were dated with today's date and the EXE's File Version stated 11.6.0.1 with a size of 640 KB. The Repair Tool apparently creates logs at "C:\Users\[user-account]\AdobeLicensingFilesBackup \".

However, Secunia still considers this unresolved, stating that version 11.10.0.2 is the required mitigation. According to Adobe, my system is now patched ... yet Secunia is still complaning.

The ALRT has one caveat: If you press "0" at the second prompt, it will DELETE your existing Adobe licenses such as Photoshop CS3, etc. This may present additional issues for some people. In this scenario, you will be prompted to ACTIVATE your Adobe product(s), the next time they are launched. Despite the ALRT "backing up" the licenses, there's no apparent way to restore them. Consider yourself forewarned!

Here's the ALRT dialog from a "normal" run:
(unknown source)

=======================================
Trusted Storage Recovery Script v1.0.9
=======================================

Please choose a language:

e: English
j: Japanese (???)

>: e

DISCLAIMER:

WARNING: Run at your own risk and make sure that ALL Adobe
products are closed and not running before you proceed further.

This tool has been developed to upgrade the licensing service
and repair a license file for Adobe Acrobat 8 and 9, and
Creative Suite 3 and 4 products.

Do you wish to cancel at this time so you can close any
open applications? [y/n]: (PRESSED N)


** If you are ready to run the repair, then press
the "enter/return" key now.

** If you have already run the repair once, but it didn't work,
then reboot and run the repair again (files may have been locked).

** If you have run the repair after rebooting and it still didn't
work, then reboot and when you get to this screen, enter 0.

(If the steps above did not work, and licensing continues to fail,
then please contact customer support.)

Note: This may take a few moments.

? (PRESSED ENTER)
Processing ...

* Trusted Storage files were backed up successfully!
* Trusted storage was successfuly recovered!
* 32/64-bit Anchor Service(s) installed successfully!

* License files copied to "C:\Users\[user-account]\AdobeLicensingFilesBackup "

The upgrade and repair are complete. Please attempt to
run your Adobe product again. If the problem persists,
you can run this tool again selecting the delete
license option (pressing '0' when prompted),
or call Adobe customer support.

Completed, press "enter/return" to exit:


Here's the ALRT dialog after choosing "0" (DELETE LICENSES) at the second prompt:
(unknown source)

=======================================
Trusted Storage Recovery Script v1.0.9
=======================================

Please choose a language:

e: English
j: Japanese (???)

>: e

DISCLAIMER:

WARNING: Run at your own risk and make sure that ALL Adobe
products are closed and not running before you proceed further.

This tool has been developed to upgrade the licensing service
and repair a license file for Adobe Acrobat 8 and 9, and
Creative Suite 3 and 4 products.

Do you wish to cancel at this time so you can close any
open applications? [y/n]: (PRESSED N)

** If you are ready to run the repair, then press
the "enter/return" key now.

** If you have already run the repair once, but it didn't work,
then reboot and run the repair again (files may have been locked).

** If you have run the repair after rebooting and it still didn't
work, then reboot and when you get to this screen, enter 0.

(If the steps above did not work, and licensing continues to fail,
then please contact customer support.)

Note: This may take a few moments.

? (PRESSED 0)
Processing ...

* Trusted Storage files were backed up successfully!
* Trusted storage was deleted.

* License files copied to "C:\Users\[user-account]\AdobeLicensingFilesBackup "


We have removed the licensing file. Please attempt
to run your Adobe product again. If the problem
persists, call Adobe customer support.

Completed, press "enter/return" to exit:
Was this reply relevant?
+2
-0
johnra RE: unnable to aply the patch
Member 30th Aug, 2011 06:18
Score: 3
Posts: 8
User Since: 27th Feb 2011
System Score: N/A
Location: N/A
I just ran The Adobe License Repair Tool on Windows 7 x 32. I can also confirm that the C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe was updated to 11.6.0.1.

A Rescan with Secunia PSI no longer shows the vulnerability and Dreamweaver still works.

That was not a simple fix. The Secunia PSI "install solution" was not good advice in this case.

However it was good to know about that vulnerability.
Was this reply relevant?
+3
-0
Timothy_J._McGowan RE: unnable to aply the patch
Member 30th Aug, 2011 16:43
Score: 4
Posts: 8
User Since: 18th Nov 2010
System Score: N/A
Location: US
Confirmed: Just applied the Adobe Licensing Repair Tool from an administrative account, walking through its arcane user interface, and reran Secunia PSI scan. Secunia considers the problem resolved. Adobe Acrobat Professional 9 continues to work as expected.

Did not attempt to use the 72 MB Secunia PSI-suggested download of lmadmin-i86_n3-11_10_0_2.exe.

The licensing tool is here:
http://www.adobe.com/support/contact/licensing.htm...

I knew it was Adobe that installed the FlexNet software because in this Windows 7 Home folder
C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher
was a file named fnp_registrations.xml.

Opening that file showed one word I recognized: Adobe. To confirm that it was Adobe Acrobat (and not Adobe something else) that needed the file, I noted the GUID string and searched the registry for it. It turned up exclusively for Acrobat-related entries. (I have no other Adobe software on my system, however, so perhaps that doesn't mean quite as much as I think it does.)

-- Tim
Was this reply relevant?
+4
-0
WarningU2 RE: unnable to aply the patch
Member 31st Aug, 2011 12:52
Score: 6
Posts: 16
User Since: 26th Nov 2008
System Score: N/A
Location: CA
Last edited on 31st Aug, 2011 12:52
I too confirm that the adobe tool described patched the flexnet program ... all is well with the world. Well ... except that the recommended solution should be changed by secunia ;) ...hint hint.

Odd that flexnet doesn't even appear in the scanned results now as a detected program.

Was this reply relevant?
+1
-0
Original-Paulie-D RE: unnable to aply the patch
Member 31st Aug, 2011 13:36
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
Interesting ... I did not try a full rescan in Secunia PSI; I merely double-clicked the Flexnet entry to view its details and then clicked "Rescan this app" (not sure of exact wording). I'll try a manual full scan and see if I have the same results.

Assuming this approach will work for me as it has for many of you, this would appear to be a bug in Secunia PSI; the app "rescan" should provide same results as a full rescan.
Was this reply relevant?
+0
-0
applepie RE: unnable to aply the patch
Member 31st Aug, 2011 20:45
Score: 3
Posts: 6
User Since: 23rd Aug 2011
System Score: N/A
Location: US


Several posters applied the Licensing Repair Tool and, after Flexnet disappeared from the PSI, asked whether this actually patched the vulnerability. We were told:

on 23rd Aug, 2011 02:09, applepie wrote:
That seemed to work. But where did Flexnet go? Dont see it anymor in SecuniaPSI. Is the risk still there? Can anybody from Secunia answer this question?




on 25th Aug, 2011 12:59, E.Jeppesen wrote:
Currently FlexNet Publisher 11.x needs to be at version 11.10.0.2 to be patched and secure. Any version lower than this may expose the user to potential security risks.

I understand that FlexNet Publisher 11.x may not be an easy program to patch, however, only the vendor can decide how their program is to be updated. For support to update this program I suggest contacting the vendor for assistance, and while you are at it you may also want to suggest that they provide a more user friendly update procedure.


That is why we have had many questions here.
Was this reply relevant?
+1
-0

genegold99

RE: unnable to aply the patch
[+]
This reply has been minimised due to a negative Relevancy Score.
WarningU2 RE: unnable to aply the patch
Member 31st Aug, 2011 21:04
Score: 6
Posts: 16
User Since: 26th Nov 2008
System Score: N/A
Location: CA
FYI my support case at ADOBE has been escalated to 2nd Level now. I also advised them that their license repair tool doesn't update to the latest version of Flexnet.

I still would have thought that it should show up as a program in Secunia. I suspect that the repair tool doesn't really solve the problem ... only makes it so that Secunia can't detect it as being at risk. Wow what a mess this is.
Was this reply relevant?
+1
-0
SDA1 RE: unnable to aply the patch
Member 31st Aug, 2011 21:37
Score: 1
Posts: 8
User Since: 11th Feb 2009
System Score: 100%
Location: DK
As I understand PSI has flwg. information:
Secunia Advisory SA45397

I applied the patch as suggested by PSI and my Adobe programmes (Reader & Photoshop Elements) work again.

Flexnet is shown in the PSI scan result list.

Have not received any information whatsoever from Adobe.

Assume I am in the clear and not vunerable in any way, since I applied a solution from PSI.

Don't quite understand all this fuss.

Søren



--
Secunia PSI Tray Version 2.0.0.1003
Windows XP SP3
Was this reply relevant?
+0
-0
Original-Paulie-D RE: unnable to aply the patch
Member 1st Sep, 2011 04:24
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
Last edited on 1st Sep, 2011 04:30
on 31st Aug, 2011 13:36, Original-Paulie-D wrote:
Interesting ... I did not try a full rescan in Secunia PSI; I merely double-clicked the Flexnet entry to view its details and then clicked "Rescan Program". I'll try a manual full scan and see if I have the same results.

Assuming this approach will work for me as it has for many of you, this would appear to be a bug in Secunia PSI; the app "rescan" should provide same results as a full rescan.
Bizarrely, running a full scan (click SCAN > START SCAN) allowed Secunia PSI to consider this vulnerabilty FULLY RESOLVED, despite the EXE's File Version being 11.6.0.1 .

As a reminder, Secunia previously stated that a different / newer version was required; namely 11.10.0.2.

Clearly, something is wrong with Secunia's "rules" need to be tweaked (again) ~ where are you M. HANSEN (Secuna Official who previously commented earlier in this thread).

Also, something seems wrong with the "Rescan Program" functionality, as it clearly overlooked this resolution, as mentioned above.

To summarize:
1. Run the Adobe Licensing Repair Tool, as I described in detail on a prior post.
URL is: http://www.adobe.com/support/contact/licensing.htm...

2. Reboot (optional; I did this but unsure if it influenced the results)
3. Perform a manual, full scan of your system.
Was this reply relevant?
+0
-0
WarningU2 RE: unnable to aply the patch
Member 1st Sep, 2011 12:37
Score: 6
Posts: 16
User Since: 26th Nov 2008
System Score: N/A
Location: CA
on 31st Aug, 2011 21:37, SDA1 wrote:
As I understand PSI has flwg. information:
Secunia Advisory SA45397

I applied the patch as suggested by PSI and my Adobe programmes (Reader & Photoshop Elements) work again.

Flexnet is shown in the PSI scan result list.

Have not received any information whatsoever from Adobe.

Assume I am in the clear and not vunerable in any way, since I applied a solution from PSI.

Don't quite understand all this fuss.

Søren



Can you please post the link for the fix to SA45397 ? I looked up the advisory which seems to be a slight variation of the original but I couldn't find the link to the fix ... saying it was in the cusomter area? And fuss as you call it is because the installation of the patch that was originally recommended is convoluted and not entirely necessary for the majority of users impacted by the vunerability secunia detected.

Was this reply relevant?
+0
-0
Original-Paulie-D RE: unnable to aply the patch
Member 2nd Sep, 2011 03:24
Score: 10
Posts: 25
User Since: 8th May 2011
System Score: N/A
Location: US
on 1st Sep, 2011 04:24, Original-Paulie-D wrote:
Bizarrely, running a full scan (click SCAN > START SCAN) allowed Secunia PSI to consider this vulnerability FULLY RESOLVED.

To summarize:
1. Run the Adobe Licensing Repair Tool (ALRT), as I described in detail on a prior post.
URL is: http://www.adobe.com/support/contact/licensing.htm...

2. Reboot (optional; I did this but unsure if it influenced the results)
3. Perform a manual, full scan of your system.

I've now done this on numerous other Windows 7 systems and it's resolved the Secunia warning. On a few of them, however, I had to apply the ALRT twice, before the Flexnet files were affected. Not sure why; it was applied immediately after a reboot.




Was this reply relevant?
+1
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability