Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: NET Framework 2.x and 4.x

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI 2.0 Beta

This thread has been marked as locked.
renman NET Framework 2.x and 4.x
Member 8th Oct, 2010 18:28
Ranking: 1
Posts: 18
User Since: 6th Oct, 2009
System Score: N/A
Location: US
"The version detected of Microsoft.NET Framework 2.x is 50727.3618 while the latest version including one of more security fixes is ." [No version listed.]
(Problem is with aspnet_wp.exe)


"The version detected of Microsoft.NET Framework 4.x is 4.0.30319.1 while the latest version including one of more security fixes is ." [No version listed.]
(Problem is with SMSvcHost.exe)

Solution with both is KB2416473, but install fails at Windows Update, and when downloaded and run, I get the message "None the the products that are addressed by this software update are installed on this computer."

What to do?

(Win XP, SP3, all updates except KB2416473)


BTW, it sure would be nice if I could copy and paste scan results from PSI 2.0 Beta!

Skeptia-9 RE: NET Framework 2.x and 4.x
Member 8th Oct, 2010 19:37
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Last edited on 8th Oct, 2010 19:39
For renman:

Microsoft Update installs KB2416473 as a patch for .NET Framework 3.5 SP1.

For someone to assist you, please write back and tell us if .NET 3.5 SP1 is installed on your machine.

At the present time, the latest PSI 2.0 Beta is not detecting the presence of .NET Framework 3.5 SP1. Perhaps a Secunia Official will stop by soon and clarify this situation. Furthermore, remember that PSI 2.0 is still Beta software.

I hope this helps a little.

Best regards,

Skeptia-9
WinXP Home SP3, 32-bit
Secunia PSI 2.0 (latest Beta)
Was this reply relevant?
+0
-0
renman RE: NET Framework 2.x and 4.x
Member 8th Oct, 2010 20:10
Score: 1
Posts: 18
User Since: 6th Oct 2009
System Score: N/A
Location: US
I have a folder labeled 3.5 but it sure doesn't look like a full install. I couldn't reinstall a full 3.5 so I moved the 3.5 folder to the recycle bin and tried again. Still Could not reinstall. BTW, there's no uninstall for 3.5 in Add/Remove or Revo.
Was this reply relevant?
+0
-0
Anthony Wells RE: NET Framework 2.x and 4.x
Expert Contributor 8th Oct, 2010 21:52
Score: 2437
Posts: 3,324
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 8th Oct, 2010 22:12
@renman ,

Fiddling in the dark with .Net is a recipe for tears and anguish .

Read this thread and the advice from Mogs AND read the Maurice Joyce info from the link (important EDIT******) provided by Mogs .

http://secunia.com/community/forum/thread/show/579...

If you are still stuck or in the dark , post back here with as much detail as you can .

Anthony

PS : you can copy by highlighting and then use Ctrl + C to copy and Ctrl+ V to paste


EDIT******* here is the correct link for the MAurice Joyce info :-

http://secunia.com/community/forum/thread/show/424...

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+1
-0
renman RE: NET Framework 2.x and 4.x
Member 9th Oct, 2010 00:36
Score: 1
Posts: 18
User Since: 6th Oct 2009
System Score: N/A
Location: US
I uninstalled NETframework 4.0 (never should have installed it in the first place).

Thanks to Anthony Wells, I followed the threads he suggested. Long story short:

I downloaded Aaron Stebner's .NET Framework setup verification tool from
http://cid-27e6a35d1a492af7.skydrive.live.com/self...|_Tools/netfx|_set upverifier|_new.zip
and his dotnetfx_cleanup_tool from
http://cid-27e6a35d1a492af7.skydrive.live.com/self...

I verified that .NETFramework 1, 2, and 3 were OK.
Then I used the cleanup tool to make sure 4 was removed. Then I used it to remove what there was of 3.5.

I was then able to run dotNetFx35setup.exe and then update with KB2418240.

PSI 2.0 now shows ZERO insecure programs.

I now believe in magic, and the kindness of strangers. Thank you!

-----

If I can copy in PSI 2.0 by highlighting and then using Ctrl + C, why can't I highlight, right click, and select copy?
Was this reply relevant?
+1
-0
renman RE: NET Framework 2.x and 4.x
Member 9th Oct, 2010 04:47
Score: 1
Posts: 18
User Since: 6th Oct 2009
System Score: N/A
Location: US
FWIW, Microsoft Baseline Security Analyzer said I needed KB951847 and PSI 2.0 did not.
Was this reply relevant?
+0
-0
Anthony Wells RE: NET Framework 2.x and 4.x
Expert Contributor 9th Oct, 2010 09:40
Score: 2437
Posts: 3,324
User Since: 19th Dec 2007
System Score: N/A
Location: N/A
Last edited on 9th Oct, 2010 09:46
Hi renman ,

Good job , well done . Always check the Forum first if you have a problem and try to get as much advice as possible before going at the awkward things like .Net . Plenty of people are willing to help .

Hopefully M$ will update .Net correctly for you in the future now that you have binned 4.0 and updated 3.5 .

When MBSA , M$updates and the PSI are having difficulty in agreeing , the free Belarc Advisor is a good arbitrator :-

http://belarc.com/free_download.html

Missing KB951847 might have been due to your ?? 'able installation of 3.5 at the start .

No idea why C&P is as it is , but it is !!

Take care

Anthony



--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Anthony Wells RE: NET Framework 2.x and 4.x
Expert Contributor 9th Oct, 2010 10:35
Score: 2437
Posts: 3,324
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

For Skeptia-9 ,

For some reason best known to Secunia , to my memory , none of the versions of the PSI have ever displayed 3.5 on my system .

So you need to check it's installation in Add/Remove

or in C:\WINDOWS\Microsoft.NEt\Framework\..

or use Belarc .

Just don' t fiddle unless you are an expert , a real one :)))

Take care

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability