Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: WebEx Recorder and Player

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as locked.
kardmania WebEx Recorder and Player
Member 8th Oct, 2013 06:09
Ranking: 0
Posts: 45
User Since: 7th Jun, 2009
System Score: N/A
Location: N/A
These programs show they require updates and the link for updates does not show and update link. the software does not indicate that an update is in order.

Am I missing something?


mogs RE: WebEx Recorder and Player
Expert Contributor 8th Oct, 2013 09:26
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@kardmania

You need to be a little more specific I think, in order that someone may help you.
The following list is from the Secunia advisory database....of those programs presently monitored by Secunia :-

Vendor Overview: WebEx

WebEx is currently associated with 7 pieces of software and operating systems in the Secunia database.

Choose a product below and view a full report about Secunia advisories affecting it.


Software
- WebEx Download Module ActiveX Control 2.x
- WebEx Downloader plug-in 2.x
- WebEx Meeting Manager
- WebEx Meeting Manager WebexUCFObject ActiveX Control 20.x
- WebEx Productivity Tools 2009 27.x
- Webex Server Side Record ActiveX Control 921.x
- WebEx Support Center

http://secunia.com/advisories/vendor/473/


Hope it helps.........mogs


--
Was this reply relevant?
+0
-0
kardmania RE: WebEx Recorder and Player
Member 8th Oct, 2013 19:12
Score: 0
Posts: 45
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
WebEx Recorder WBS28
WebEx Player WBS28

Secunia describes the program requiring updating as WebEx Recording Format Player this issue fell off the list briefly a few days ago and now back on

http://www.webex.com/play-webex-recording.html is provided as the update link

If you have any further questions please advise

Thanks
Was this reply relevant?
+0
-0
mogs RE: WebEx Recorder and Player
Expert Contributor 8th Oct, 2013 20:58
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@kardmania

I've found an Advisory for WebEx Recording Format Player....but the vendor is shown as Cisco :-
http://secunia.com/advisories/product/3004/
As you can, see it's shown as not vulnerable when fully patched.

Excerpt
Vendor, Links, and Unpatched Vulnerabilities

Vendor Cisco

Product Link View Here (Link to external site)

Affected By 8 Secunia advisories
28 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 0% (0 of 8 Secunia advisories)

Most Critical Unpatched
There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..


The product is shown at the bottom of the Cisco product list here :-
http://secunia.com/advisories/vendor/5/

So it seems the product link you're getting needs lookin' at by Support.....hopefully someone will take up the issue in the morning.

Hope it's of some help.......mogs...

--
Was this reply relevant?
+0
-0
Maurice Joyce RE: WebEx Recorder and Player
Handling Contributor 8th Oct, 2013 21:06
Score: 11793
Posts: 9,036
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Cisco is WebEx?

http://www.webex.com/

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kardmania RE: WebEx Recorder and Player
Member 9th Oct, 2013 00:20
Score: 0
Posts: 45
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
cisco is webex

i am still unclear if these programs do require a pactch

Was this reply relevant?
+0
-0
Maurice Joyce RE: WebEx Recorder and Player
Handling Contributor 9th Oct, 2013 01:33
Score: 11793
Posts: 9,036
User Since: 4th Jan 2009
System Score: N/A
Location: UK
What path is PSI showing to the vulnerability?

FINDING A FILE PATH USING PSI

VERSION 2


From the DASHBOARD page click on SCAN RESULTS.

1. This will list all your programmes with a + to the left of each programme.
2. Click the + sign next to the item that U want help with.
3. This will reveal the path under DETECTED INSTANCES.
4. Below DETECTED INSTANCES you will see this You can double click this row for additional information & options>double click it>a box will appear>look to the RIGHT & U will see TROUBLESHOOT REPORT in BLUE writing under the heading TOOLBOX> click TroubleShoot Report & it will reveal some information in a box>highlight the information revealed from ---START--- to ---END--- & copy it (CTRL+C) then post it to the Forum (CTRL+V)

VERSION 3
This version does not have such an easy method to publish the path.

Open PSI>once open select Show Programs.
U will now see a page full of programme icons or a list.
Right click on the programme in error>select Show Details - that will open a box showing the path & version number of the offending file.
U now have 2 options:
1. Write down the exact file path & install version - return to the Forum & type that information.
2. Take a screen shot & publish that.

Last Reviewed 00:32 09/10/2013











--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kardmania RE: WebEx Recorder and Player
Member 9th Oct, 2013 03:50
Score: 0
Posts: 45
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
is secunia psi
version 2 superior to version 3?

Was this reply relevant?
+0
-0
mogs RE: WebEx Recorder and Player
Expert Contributor 9th Oct, 2013 04:17
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@kardmania

Psi 2.0 generally shows more info/detail......psi 3.0 was introduced as being more suitable for the beginner..............mogs.........

--
Was this reply relevant?
+0
-0
kardmania RE: WebEx Recorder and Player
Member 9th Oct, 2013 05:50
Score: 0
Posts: 45
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
c: \Program File(x86)WebEx\record Playback\atasanot.exe installed version 28.400.12.307


thanks for the heads up on the versions
Was this reply relevant?
+0
-0
Maurice Joyce RE: WebEx Recorder and Player
Handling Contributor 9th Oct, 2013 11:36
Score: 11793
Posts: 9,036
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Thank you. Clearly Secunia have identified an exe file that is vulnerable. I would suggest you follow this link to see the details of the Player & Recorder.

https://support.webex.com/MyAccountWeb/knowledgeBa...

You will note that if you do not have a host account it points to:

http://www.webex.com/play-webex-recording.html which is what Secunia are advising.

There is more reading of WebEx woes here that may be of interest:

https://secunia.com/community/forum/all_threads/?f...

If doubts remains I would suggest you email support at support@secunia.com & ask them to look at this thread and advise you.

Perhaps I can expand on the versions of PSI.

All versions give roughly the same detail when it finds a vulnerability (its core purpose) which a user can follow to carry out remedial action. The difference is merely presentation.

A bonus for some is that version 2 has the ability to show an advanced user option whereby it shows some items that are attached to the browser. Unless fixed recently the latest version of 2 has a bug whereby it does not show all the detail available in earlier sub versions.

Version 3 is the only one that will work with Secunia Small Business (SMB). I am currently BETA testing this & my Endpoints report very favourably on Version 3.

Version 3 users who are interested in checking their browser can always use Qualy's Checker.

This has advantages:

1. It is cloud based & only an Active X is required to be installed in IE to get the best results.

2. It is extremely fast and has features not available to PSI - mainly the ability to update any Microsoft patch(es) that it finds are not installed.

3. An icon lingers in the Tasktray that,on activation, will give an almost immediate readout of browser attachment security rather than the 2/3/4 minute scan reported by some members using version 2.

3. It meets the criteria of not relying on one vendor in support of any security arrangement.



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
kardmania RE: WebEx Recorder and Player
Member 16th Oct, 2013 07:03
Score: 0
Posts: 45
User Since: 7th Jun 2009
System Score: N/A
Location: N/A
Thanks for all your help with the issue and the software variants
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer