pcAnywhere TECH182142 hotfix
| Article:TECH182142 | | | Created: 2012-02-23 | | | Updated: 2012-04-11 | | | Article URL http://www.symantec.com/docs/TECH182142 |
Problem
Note: pcAnywhere 12.5 SP4 and pcAnywhere Solution 12.6.7 have now been released. These versions of pcAnywhere include all previous hot fixes and an updated security model. Symantec recommends that customers install either pcAnywhere 12.5 SP4 or pcAnywhere Solution 12.6.7.
For more information about these releases and for upgrade instructions, see the following article:
www.symantec.com/docs/DOC5442
------------------------
This hotfix addresses security issues, including the issues outlined in the following pcAnywhere Security Advisories. Symantec recommends that you apply this hotfix to your current pcAnywhere system.
Symantec pcAnywhere Multiple Security Updates
Symantec pcAnywhere Symantec pcAnywhere awhost32 Denial of Service
This is a rollup hotfix that contains all of the fixes from the TECH179526, TECH179960, and TECH180472 hotfixes as well as some additional functionality. The TECH179526, TECH179960, and TECH180472 hotfixes are now deprecated and should not be applied. Customers who have applied the TECH179526, TECH179960, and TECH180472 should also apply this hotfix.
For language support click on the Show all link under Languages.
For other available languages see the attachments.
Solution
Supported versions
The following tables outline the versions that are currently supported by the attached hotfix file. As the hotfix file is updated, more versions may become supported.
Note: This hotfix can be applied to the Host and Remote versions of pcAnywhere.
pcAnywhere (box product)
| Version |
| 12.5 SP3 (12.5.1 build 486) |
| 12.5 SP2 (12.5.0 build 463) |
| 12.5 SP1 (12.5.0 build 442) |
| 12.5 (12.5.0 build 265) |
| 12.1 |
| 12.0 |
pcAnywhere Solution
| ITMS version | pcAnywhere version |
| ITMS 7.1 SP2 | pcA Solution 12.6.7580 |
| ITMS 7.1 SP1 | pcA Solution 12.6.65 |
| ITMS 7.1 | pcA Solution 12.6.65 |
| ITMS 7.0 | pcA Solution 12.5.539 |
This hotfix does not apply to systems that only have Access Server installed.
For information and instructions on how to detect pcAnywhere and determine what version is running on a system, see the article at the following URL:
www.symantec.com/docs/HOWTO66132
Known issues
The following are the known issues with this hotfix:
- If this hotfix is applied before you upgrade to the latest version of pcAnywhere (ITMS 7.1 SP2 or pcA 12.5 SP3), the hotfix should to be uninstalled before the upgrade and reapplied after the upgrade.
- This hotfix will not update version 12.0.0.132 directly (run LiveUpdate to get to version 12.0.1.156 and then apply the hotfix).
- If the pcAnywhere console is open during the hotfix installation, the installation may not finish until the console is closed.
Upgrading to pcAnywhere 12.5 build 486 (SP3)
Before you install this hotfix, Symantec strongly recommends that upgrade to pcAnywhere 12.5 build 486 (SP3). For more information and instructions on how to do this, see the article at the following URL:
http://www.symantec.com/docs/TECH180597
If you cannot install pcAnywhere 12.5 build 486 (SP3), you can still install this hotfix. However, you must uninstall this hotfix before you upgrade and reapply the hotfix after you install any service packs.
Installing the hotfix
- Complete one of the following tasks:
Receive the hotfix with LiveUpdate or install the hotfix without LiveUpdate.
See "Receiving the hotfix with LiveUpdate"
See "Installing the hotfix without LiveUpdate"
- Complete the following task:
Verify the update.
See "Verifying the update"
Note: If you are installing this hotfix in an environment with CMS 7.1 or ITMS 7.1, see the “pcAnywhere TECH182142 hotfix installation package for ITMS” article at the following location:
www.symantec.com/docs/TECH182676
Receiving the hotfix with LiveUpdate
LiveUpdate is the preferred way to install this hotfix. In the pcAnywhere application, click Help > LiveUpdate. After LiveUpdate opens, the update begins. For LiveUpdate to apply this hotfix, you must be on pcAnywhere version 12.5 SP3. If you have never performed a LiveUpdate on pcAnywhere version 12.5 you must run four updates before the hotfix installs. You may be required to reboot your computer before the installation through LiveUpdate is complete.
If you are an administrator and want to silently trigger a LiveUpdate with another tool, you can type the following at the command line:
luall -s -a -p "pcAnywhere"
If you choose to trigger a LiveUpdate with the command line, you may need to run the trigger four times. You only need to run it four times if you have never performed a LiveUpdate on pcAnywhere 12.5.
Installing the hotfix without LiveUpdate
Use the attached file, PCAnywhere_12.x_Tech182142.MSI, to apply the update. To apply the update silently, use the /qn switch. For example: msiexec /i PCAnywhere_12.x_Tech182142.msi /qn.
This MSI applies to pcAnywhere Solution clients and the pcAnywhere boxed product. It is the preferred method of updating the software if LiveUpdate is not installed.
For pcAnywhere versions 12.5 and higher, the MSI detects which versions of several files, including awhlogon.dll, awterm32.dll, and awrem32.exe you have and lays down the correct patched version of the dll. If there are no corresponding patched versions for your current binary versions, you will receive the following error, “This install is not valid for your version of pcAnywhere.”
You may also receive an error when the installation of the hotfix starts or stops the Symantec pcAnywhere Host Service. You can safely ignore this error.
Note: In some cases after you run the MSI the pcAnywhere service will start even if it was not running previously. This allows users with Administrator credentials to connect to the computer via pcAnywhere. In this case, simply rebooting the computer will restore this service to its default state.
Verifying the update
To verify the update, check the file version of awhlogon.dll, awterm32.dll, awrem32.exe, crypto.dll, shellClient.dll, awcfgmgr.dll, WinAw32.exe, PCAQuickConnectDLL.dll, awhpilot.dll, crypshism.dll, awheq.dll, and aw32tcp.dll as follows:
- On computers with 32-bit versions of Windows, these files will be in C:\Program Files\Symantec\pcAnywhere.
- On computers with a 64-bit version of Windows, these files will be in C:\Program Files (x86)\Symantec\pcAnywhere.
- Your install path is different if a non-default location was used.
- Use the following tables to figure out what version the file should be after the update.
- The starting file versions in these tables only apply if you are starting from an unpatched system (without the TECH179526, TECH179960, or TECH180472 hotifxes). To see what the starting file versions would be on a partially patched system, visit the appropriate hotfix article.
Note: Depending on how the hotfix was installed, you can also see the version number by browsing to Help > About Symantec pcAnywhere in the pcAnywhere application. If you used the MSI to install the hotfix, the build number will not change. If you used LiveUpdate, the build number should be 12.5.1 build 525.
pcAnywhere (box product)
| pcAnywhere Version | Starting version of all files | New version of awhlogon.dll, awhpilot.dll, crypshim.dll, awhseq.dll, and aw32tcp.dll | New version of awterm32.dll and awrem32.exe | New version of crypto.dll, shellclient.dll, and awcfgmgr.dll | New version of winaw32.exe | New version of pcaQuickConnectDLL.dll |
| 12.5 SP3 | 12.5.1.486 | 12.5.1.525 | 12.5.1.514 | 12.5.1.515 | 12.5.1.515 | 12.5.1.515 |
| 12.5 SP2 | 12.5.0.463 | 12.5.0.484 | 12.5.0.482 | 12.5.0.483 | 12.5.0.483 | 12.5.0.483 |
| 12.5 SP1 | 12.5.0.442 | 12.5.0.484 | 12.5.0.482 | 12.5.0.483 | 12.5.0.483 | 12.5.0.483 |
| 12.5 | 12.5.0.265 | 12.5.0.304 | 12.5.0.302 | 12.5.0.303 | 12.5.0.303 | 12.5.0.303 |
| 12.1.0 | 12.1.0.446/447/448 | 12.1.0.473 | 12.1.0.471 | 12.1.0.472 | 12.1.0.472 | N/A |
| 12.0.3 | 12.0.2.174 | 12.0.3.405 | 12.0.3.403 | 12.0.3.404 | 12.0.3.404 | N/A |
| 12.0.2 | 12.0.2.174 | 12.0.3.405 | 12.0.3.403 | 12.0.3.404 | 12.0.3.404 | N/A |
| 12.0.1 | 12.0.1.156 | 12.0.3.405 | 12.0.3.403 | 12.0.3.404 | 12.0.3.404 | N/A |
pcAnywhere Solution
| ITMS version | pcAnywhere version | Starting version of all files | New version of awhlogon.dll, awhpilot.dll, crypshim.dll, awhseq.dll, and aw32tcp.dll | New version of awterm32.dll and awrem32.exe | New version of crypto.dll, shellclient.dll, awcfgmgr.dll, and pcaQuickConnectDLL.dll | New version of WinAw32.exe (on ITMS server only) |
| ITMS 7.1 SP2 | pcA Solution 12.6.7580 | 12.5.0.1021 | 12.5.0.1029 | 12.5.0.1028 | 12.5.0.1028 | 12.5.0.1028 |
| ITMS 7.1 SP1 | pcA Solution 12.6.65 | 12.5.0.675 | 12.5.0.682 | 12.5.0.680 | 12.5.0.681 | 12.5.0.681 |
| ITMS 7.1 | pcA Solution 12.6.65 | 12.5.0.675 | 12.5.0.682 | 12.5.0.680 | 12.5.0.681 | 12.5.0.681 |
| ITMS 7.0 | pcA Solution 12.5.539 | 12.5.0.618 | 12.5.0.634 | 12.5.0.633 | 12.5.0.633 | 12.5.0.633 |
Uninstalling the hotfix
For information and instructions on uninstalling this hotfix, see the article at the following URL:
http://www.symantec.com/docs/HOWTO73189
Troubleshooting
Please note that LiveUpdate may not work on Windows 7 computers with pcAnywhere 12.5. This is a known issue with pcAnywhere 12.5 and Windows 7. For information and instructions on installing LiveUpdate version 3.3, see the article at the following URL:
www.symantec.com/docs/TECH140001
You may receive the following error message during the MSI installation, "Error 1721. There is a problem with this Windows Installer package…". If you do, make sure that Microsoft Visual C++ runtime libraries are installed. For information on how to do this, see the article at the following URL:
www.microsoft.com/download/en/details.aspx?id=5638
FAQ
Q. If I have not installed the TECH179526, TECH179960, and TECH180472 hotfixes do I need to install both the TECH182142 hotfix and these hotfixes?
A. No. Just install this hotfix.
Q. Is this hotfix compatible with pcAnywhere rollup hotfix version 12.6.66 (www.symantec.com/docs/TECH159971)?
A. Yes.
Q. Is this hotfix compatible with pcAnywhere rollup hotfix version 12.5.0.49 (www.symantec.com/docs/TECH123841)?
A. No.
Q. Is this hotfix compatible with the Privacy Patch (www.symantec.com/docs/TECH138171)?
A. No.
Q. Is this hotfix compatible with pcAnywhere enhanced logging hotfix version 12.5.542 (www.symantec.com/docs/TECH168996)?
A. Yes.
Q. The instructions for this LiveUpdate require fewer updates than the instructions for TECH179960 and TECH180472. Why is that?
A. It requires fewer updates because the LiveUpdate for TECH182142 is a cumulative update that includes the fixes in TECH179526, TECH179960, and TECH180472. The LiveUpdate versions of the first three hotfixes were incremental and depended on the existence of the previous hotfix.
For more information, see the following articles:
Security Issue: Patching pcAnywhere’s vulnerabilities with Software Management in Symantec Management Platform
Uninstalling pcAnywhere
Disabling pcAnywhere
Attachments
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Article URL http://www.symantec.com/docs/TECH182142
Terms of use for this information are found in Legal Notices









Thank you.