navigation bar left navigation bar right

Secunia CSI7
navigation left tab Advisories navigation right tab
navigation left tab Research navigation right tab
navigation left tab Forums navigation right tab
navigation left tab Create Profile navigation right tab
navigation left tab Our Commitment navigation right tab
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Java SPS Package says it installs but doesn't

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
CSI

This thread has been marked as locked.
MSURegulator Java SPS Package says it installs but doesn't
Member 4th Feb, 2013 18:57
Ranking: 0
Posts: 2
User Since: 4th Feb, 2013
System Score: N/A
Location: US
Hello,

I've create a default package that Secunia CSI offered for Jave 32 bit update 7u13. It says it installed but in the test environment, it doesn't and just keeps on asking to up date it again. Sometimes it just keeps on trying to up date and freezes the machine. Strange thing is, when I created the java 64 bit package, it pushed fine. I need to push this out to 2,000 machines. any recommndations?

Using Secunia CSI 5
agent: 5.0.0.1005
target machines Windows 7 64 bit.

t.kastermans@zandvoort.nl Java SPS Package says it installs but doesn\'t
Member 6th Feb, 2013 15:40
Last edited on 6th Feb, 2013 15:40 Try using /s instead of /S in the executing script.
I haven\'t tested it yet but the Java installer only accepts /s for quiet install.
Was this reply relevant?
+0
-0
Pla_IIS Java SPS Package says it installs but doesn\'t
Member 7th Feb, 2013 07:51
Last edited on 7th Feb, 2013 07:51 On some our our about 2000 PCs we find the same problem: the Java package pops up again and again.

Manual installation of the Java package does not solve the problem.

In the Secunia logfile I find some error entries, but I have no idea what the error codes refer to:

[02/04 20:01:45.759] Exception -2146828218 : Erlaubnis verweigert.
[02/04 21:29:42.782] Running package Update Sun Java JRE 1.6.x / 6.x, version 6.0.390.4, Extremely Critical
[02/04 21:29:42.782] GUID : ee77329d-52bc-4341-a925-d0e7550a8839
[02/05 07:08:52.586] Executed command, but failed to complete. Abandoning.
[02/05 07:08:56.725] Exception -2146828218 : Erlaubnis verweigert.
[02/06 12:22:56.090] Running package Update Sun Java JRE 1.6.x / 6.x, version 6.0.390.4, Extremely Critical
[02/06 12:22:56.090] GUID : ee77329d-52bc-4341-a925-d0e7550a8839
[02/06 12:23:18.898] Executed command, return status is 1603
[02/06 12:23:18.910] Finished running package Update Sun Java JRE 1.6.x / 6.x, version 6.0.390.4, Extremely Critical
[02/06 14:00:31.270] Running package Update Sun Java JRE 1.6.x / 6.x, version 6.0.390.4, Extremely Critical
[02/06 14:00:31.271] GUID : ee77329d-52bc-4341-a925-d0e7550a8839
[02/06 14:00:50.773] Executed command, return status is 1603
[02/06 14:00:50.789] Finished running package Update Sun Java JRE 1.6.x / 6.x, version 6.0.390.4, Extremely Critical
Was this reply relevant?
+0
-0
O.Marin RE: Java SPS Package says it installs but doesn't
Secunia Official 7th Feb, 2013 12:04
Score: 30
Posts: 116
User Since: 4th Aug 2011
System Score: N/A
Location: Copenhagen, DK
A list with error codes can be found here:
http://support.microsoft.com/kb/229683

It might be that you have the same scenario as here:
http://social.technet.microsoft.com/Forums/da/mdt/...

Did you use the standard pacakge suggested by the CSI?

--
Kind Regards,

Oana Marin
Solution Specialist
Pla_IIS Java SPS Package says it installs but doesn\'t
Member 10th Feb, 2013 17:49
Last edited on 10th Feb, 2013 17:49 I generated the update package directly from the Secunia console (standard package).

The problem only arises on some of our PCs.

On WinXP PCs it\'s sufficient to remove manually all Java installations and manually install the Java update 6.39. On Win7 PCs I had some cases where the only workaround to calm down the Secunia updater was the manual insertion of the Secunia registry key for that package.
Was this reply relevant?
+0
-0
O.Marin RE: Java SPS Package says it installs but doesn't
Secunia Official 11th Feb, 2013 15:39
Score: 30
Posts: 116
User Since: 4th Aug 2011
System Score: N/A
Location: Copenhagen, DK
we have released today a new Java package for version 7 update 13 and version 6 update 39.
The Java update package will be installed at shutdown.

You have to rescan an insecure version of Java so that the new detection rules come into place. Can you try it out and see if it behaves better?

As a side note: for those of you on CSI 6, we have a new version of CSI 6 console that you can download from our website.

--
Kind Regards,

Oana Marin
Solution Specialist
MSURegulator RE: Java SPS Package says it installs but doesn't
Member 11th Feb, 2013 17:42
Score: 0
Posts: 2
User Since: 4th Feb 2013
System Score: N/A
Location: US
I created my own solution. I created a javascript that would pull down the added files and install them via a batch file. So far, a 100% success rate. Works with Jav 6 and 7 updating. It's a variation on another Secunia community member's "install multiple files" script. The original issue was was with the 32 bit default secunia package for jre7u13 and jre6u39. Reboots didn't fix the issue.

Posting the script up here for refernce. Edit the Applicability rules to fit your needs. remember to put a check in the box next to "Do not install if java is running."

Javascript:[/]

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<packageContent>

<packageName><![CDATA[Update Oracle Java JRE 1.7.x / 7.x, version 7.0.130.20, (32 bit for x64 Systems) Extremely Critical]]></packageName>
<description><![CDATA[This is a custom package that will apply to any host that has an older version of Java 7 on it.. (MODIFY) Created by KJ Hopkins]]></description>
<reference><![CDATA[]]></reference>
<execute><![CDATA[var Title = "pdate Oracle Java JRE 1.7.x / 7.x, version 7.0.130.20, (32 bit for x64 Systems) Extremely Critical";
var GUID = "5f610594-08b2-4ac4-8ba5-c3e5ab9ad750";
var fixedpath = "Java7u13Install"
var userSpecficParams = "/s";
var reqfiles = 4

// NOTE - keep the GUID and title variables already set up in the default script.

// Note - this assumes that the file order of the included files, whether they be // local files or dynamically downloaded files, is as follows:
// Files in order:
//Ainstall.bat !!!!Your Batch file!!!!
//jjre1.7.0.13.msi
//Data1.cab

function main() {

if ( !GUID ) {
server.logMessage("No GUID supplied for package " + Title);
return 1;
}

server.logMessage("Running package " + Title);
server.logMessage("GUID : " + GUID);

// There must be at least 4 embedded files (this script is the first one)
var numFiles = server.numberOfFiles;
if ( numFiles < reqfiles ) {
server.logMessage("Incorrect number of embedded files. Aborting.");
return 1;
}

var filename, shell, sys, temp, tempPath, outdir; // Declare variables we use below

// Set up the directory the files will be extracted to and run from
shell = new ActiveXObject( "WScript.Shell" );
temp = shell.ExpandEnvironmentStrings( "%TEMP%" );
sys = new ActiveXObject( "Scripting.FileSystemObject" );
tempPath = temp + "\\\\" + fixedpath;
try {
if ( sys.FolderExists( tempPath ) ) {
outdir = sys.GetFolder( tempPath );
} else {
outdir = sys.CreateFolder( tempPath );
}
} catch ( ex ) {
server.logMessage( "Exception with get/create temporary directory " + ex.number + " : " + ex.message );
return 1;
}

// First, extract all the files into the outdir created/found above and get the full path names into
// an array that we can reference later
var extractedFileNamesWithPath = [];
for ( var i=1; i <= reqfiles - 1; i++ ) {
filename = server.getFilename( i );
if ( !filename ) {
server.logMessage( "Cannot read filename: " + filename + " from file. Corrupted file." );
return 1;
}

tempFileWithPath = outdir.Path + "\\\\" + filename;

// Check integrity of file
sha1Sum = server.getSHA1Sum( i ); // file at index i
if ( !sha1Sum ) {
server.logMessage( "Cannot read SHA1SUM from file. Corrupted file." );
return 1;
}
try {
server.extractFile( i, tempFileWithPath ); // file at index i
} catch ( ex ) {
server.logMessage( "Error when extracting file " + ex.number + " : " + ex.message + "File may already exist." );
}
sha1SumCalc = server.getSHA1Sum( tempFileWithPath );
if ( sha1SumCalc !== sha1Sum ) {
server.logMessage( "Wrong SHA1SUM. Corrupted file." );
return 1;
}

// File is ok - store the tempFileWithPath into our array
extractedFileNamesWithPath[ extractedFileNamesWithPath.length ] = tempFileWithPath;
}

// We need to the appropriate command on the 5 extracted files. i.e. if they were called: File0, File1, ..., File4
//

var commandLine = extractedFileNamesWithPath[0] + " " + userSpecficParams;
server.logMessage("Executing: " + commandLine);
var exec = shell.Exec( commandLine );

wait( exec, 1 * 1200 * 1000 ); // timeout in 10 minutes

if ( !exec.Status ) {
server.logMessage("Executed " + commandLine + ", but failed to complete. Abandoning.");
exec.Terminate();
wait( exec, 300 * 1000 ); // timeout in 5 mins
sys.DeleteFolder( outdir.Path );
return 1;
} else {
server.logMessage("Executed " + commandLine + ", return status is " + exec.ExitCode);
shell.RegWrite( "HKLM\\Software\\Secunia\\Updates\\Installed\\" + GUID + "\\", Title );
sys.DeleteFolder( outdir.Path );
}
}

// The function waits for the command to complete its execution or timeout
function wait( execObject, timeout ) {
var start = ( new Date() ).valueOf();
while ( 0 === execObject.Status && (new Date()).valueOf()-start < timeout ) { server.sleep(1000); } }
main();]]></execute>
<source><![CDATA[JScript]]></source>
<applicabilityPaths>
<alwaysInstallable><![CDATA[false]]></alwaysInst allable>
</applicabilityPaths>

<systemApplicability><![CDATA[only64]]></systemAp plicability>
<javaSpecial><![CDATA[true]]></javaSpecial>
<rebootRequired><![CDATA[false]]></rebootRequired >
<onlyLanguages><![CDATA[false]]></onlyLanguages>
<doNotIncludePaths><![CDATA[true]]></doNotInclude Paths>

</packageContent>

[b]Batch File
:
%~dp0jre1.7.0_13.msi /qn
REG ADD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v EnableAutoUpdateCheck /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v NotifyDownload /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v NotifyInstall /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v EnableAutoUpdateCheck /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v NotifyDownload /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v NotifyInstall /t REG_DWORD /d 0 /f
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


Secunia is a member of FIRST Secunia is a member of EDUcause Secunia is a member of The Open Group Secunia is a member of FS-ISAC
 
Secunia © 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer
follow Secunia on Facebook follow Secunia on Twitter follow Secunia on LinkedIn follow Secunia on YouTube follow Secunia Xing follow Secunias RSS feed follow Secunia on Google+