pcAnywhere TECH182142 hotfix

Article:TECH182142  |  Created: 2012-02-23  |  Updated: 2014-04-11  |  Article URL http://www.symantec.com/docs/TECH182142
Article Type
Technical Solution

Product(s)

Issue



Note: pcAnywhere 12.5 SP4 and pcAnywhere Solution 12.6.7 have now been released. These versions of pcAnywhere include all previous hot fixes and an updated security model. Symantec recommends that customers install either pcAnywhere 12.5 SP4 or pcAnywhere Solution 12.6.7.

For more information about these releases and for upgrade instructions, see the following article:
www.symantec.com/docs/DOC5442

 ------------------------

This hotfix addresses security issues, including the issues outlined in the following pcAnywhere Security Advisories. Symantec recommends that you apply this hotfix to your current pcAnywhere system.

Symantec pcAnywhere Multiple Security Updates
Symantec pcAnywhere Symantec pcAnywhere awhost32 Denial of Service
 

This is a rollup hotfix that contains all of the fixes from the TECH179526, TECH179960, and TECH180472 hotfixes as well as some additional functionality. The TECH179526, TECH179960, and TECH180472 hotfixes are now deprecated and should not be applied. Customers who have applied the TECH179526, TECH179960, and TECH180472 should also apply this hotfix.

 

For language support click on the Show all link under Languages.
For other available languages see the attachments.


Solution



Supported versions

The following tables outline the versions that are currently supported by the attached hotfix file. As the hotfix file is updated, more versions may become supported.

 

Note: This hotfix can be applied to the Host and Remote versions of pcAnywhere.

 

pcAnywhere (box product)

Version
12.5 SP3 (12.5.1 build 486)
12.5 SP2 (12.5.0 build 463)
12.5 SP1 (12.5.0 build 442)
12.5 (12.5.0 build 265)
12.1
12.0

 

pcAnywhere Solution

ITMS version pcAnywhere version
ITMS 7.1 SP2 pcA Solution 12.6.7580
ITMS 7.1 SP1 pcA Solution 12.6.65
ITMS 7.1 pcA Solution 12.6.65
ITMS 7.0 pcA Solution 12.5.539

 

This hotfix does not apply to systems that only have Access Server installed.
For information and instructions on how to detect pcAnywhere and determine what version is running on a system, see the article at the following URL:
www.symantec.com/docs/HOWTO66132

 

Known issues

The following are the known issues with this hotfix:

 

  • If this hotfix is applied before you upgrade to the latest version of pcAnywhere (ITMS 7.1 SP2 or pcA 12.5 SP3), the hotfix should to be uninstalled before the upgrade and reapplied after the upgrade.
  • This hotfix will not update version 12.0.0.132 directly (run LiveUpdate to get to version 12.0.1.156 and then apply the hotfix).
  • If the pcAnywhere console is open during the hotfix installation, the installation may not finish until the console is closed.

 

Upgrading to pcAnywhere 12.5 build 486 (SP3)

Before you install this hotfix, Symantec strongly recommends that upgrade to pcAnywhere 12.5 build 486 (SP3). For more information and instructions on how to do this, see the article at the following URL:
http://www.symantec.com/docs/TECH180597

If you cannot install pcAnywhere 12.5 build 486 (SP3), you can still install this hotfix. However, you must uninstall this hotfix before you upgrade and reapply the hotfix after you install any service packs.


 

Installing the hotfix

  1. Complete one of the following tasks:

Receive the hotfix with LiveUpdate or install the hotfix without LiveUpdate.

See "Receiving the hotfix with LiveUpdate"

See "Installing the hotfix without LiveUpdate"

  1. Complete the following task:

Verify the update.

See "Verifying the update"

 

Note: If you are installing this hotfix in an environment with CMS 7.1 or ITMS 7.1, see the “pcAnywhere TECH182142 hotfix installation package for ITMS” article at the following location:
www.symantec.com/docs/TECH182676

 

Receiving the hotfix with LiveUpdate

LiveUpdate is the preferred way to install this hotfix. In the pcAnywhere application, click Help > LiveUpdate. After LiveUpdate opens, the update begins. For LiveUpdate to apply this hotfix, you must be on pcAnywhere version 12.5 SP3. If you have never performed a LiveUpdate on pcAnywhere version 12.5 you must run four updates before the hotfix installs. You may be required to reboot your computer before the installation through LiveUpdate is complete.

 

If you are an administrator and want to silently trigger a LiveUpdate with another tool, you can type the following at the command line:

 

luall -s -a -p "pcAnywhere"

 

If you choose to trigger a LiveUpdate with the command line, you may need to run the trigger four times. You only need to run it four times if you have never performed a LiveUpdate on pcAnywhere 12.5.

 

Installing the hotfix without LiveUpdate

Use the attached file, PCAnywhere_12.x_Tech182142.MSI, to apply the update. To apply the update silently, use the /qn switch. For example: msiexec /i PCAnywhere_12.x_Tech182142.msi /qn.


 

This MSI applies to pcAnywhere Solution clients and the pcAnywhere boxed product. It is the preferred method of updating the software if LiveUpdate is not installed.

 

For pcAnywhere versions 12.5 and higher, the MSI detects which versions of several files, including awhlogon.dll, awterm32.dll, and awrem32.exe you have and lays down the correct patched version of the dll. If there are no corresponding patched versions for your current binary versions, you will receive the following error, “This install is not valid for your version of pcAnywhere.”

 

You may also receive an error when the installation of the hotfix starts or stops the Symantec pcAnywhere Host Service. You can safely ignore this error.

 

Note: In some cases after you run the MSI the pcAnywhere service will start even if it was not running previously. This allows users with Administrator credentials to connect to the computer via pcAnywhere. In this case, simply rebooting the computer will restore this service to its default state.

 

Verifying the update

To verify the update, check the file version of awhlogon.dll, awterm32.dll, awrem32.exe, crypto.dll, shellClient.dll, awcfgmgr.dll, WinAw32.exe, PCAQuickConnectDLL.dll, awhpilot.dll, crypshism.dll, awheq.dll, and aw32tcp.dll as follows:

 

  • On computers with 32-bit versions of Windows, these files will be in C:\Program Files\Symantec\pcAnywhere.
  • On computers with a 64-bit version of Windows, these files will be in C:\Program Files (x86)\Symantec\pcAnywhere.
  • Your install path is different if a non-default location was used.
  • Use the following tables to figure out what version the file should be after the update.
  • The starting file versions in these tables only apply if you are starting from an unpatched system (without the TECH179526, TECH179960, or TECH180472 hotifxes). To see what the starting file versions would be on a partially patched system, visit the appropriate hotfix article.

 

Note: Depending on how the hotfix was installed, you can also see the version number by browsing to Help > About Symantec pcAnywhere in the pcAnywhere application. If you used the MSI to install the hotfix, the build number will not change. If you used LiveUpdate, the build number should be 12.5.1 build 525.

 

pcAnywhere (box product)

pcAnywhere Version Starting version of all files New version of awhlogon.dll, awhpilot.dll, crypshim.dll, awhseq.dll, and aw32tcp.dll New version of awterm32.dll and awrem32.exe New version of crypto.dll, shellclient.dll, and awcfgmgr.dll New version of winaw32.exe New version of pcaQuickConnectDLL.dll
12.5 SP3 12.5.1.486  12.5.1.525  12.5.1.514  12.5.1.515  12.5.1.515  12.5.1.515
12.5 SP2 12.5.0.463  12.5.0.484  12.5.0.482  12.5.0.483  12.5.0.483  12.5.0.483
12.5 SP1 12.5.0.442  12.5.0.484  12.5.0.482  12.5.0.483  12.5.0.483  12.5.0.483
12.5 12.5.0.265  12.5.0.304  12.5.0.302  12.5.0.303  12.5.0.303  12.5.0.303
12.1.0 12.1.0.446/447/448  12.1.0.473  12.1.0.471  12.1.0.472  12.1.0.472  N/A
12.0.3 12.0.2.174  12.0.3.405  12.0.3.403  12.0.3.404  12.0.3.404  N/A
12.0.2 12.0.2.174  12.0.3.405  12.0.3.403 12.0.3.404 12.0.3.404  N/A
12.0.1 12.0.1.156 12.0.3.405 12.0.3.403 12.0.3.404 12.0.3.404  N/A

 

pcAnywhere Solution

ITMS version pcAnywhere version Starting version of all files New version of awhlogon.dll, awhpilot.dll, crypshim.dll, awhseq.dll, and aw32tcp.dll New version of awterm32.dll and awrem32.exe New version of crypto.dll, shellclient.dll, awcfgmgr.dll, and pcaQuickConnectDLL.dll New version of WinAw32.exe (on ITMS server only)
ITMS 7.1 SP2 pcA Solution 12.6.7580 12.5.0.1021 12.5.0.1029 12.5.0.1028 12.5.0.1028 12.5.0.1028
ITMS 7.1 SP1 pcA Solution 12.6.65 12.5.0.675 12.5.0.682 12.5.0.680 12.5.0.681 12.5.0.681
ITMS 7.1 pcA Solution 12.6.65 12.5.0.675 12.5.0.682 12.5.0.680 12.5.0.681 12.5.0.681
ITMS 7.0 pcA Solution 12.5.539 12.5.0.618 12.5.0.634 12.5.0.633 12.5.0.633 12.5.0.633

 

Uninstalling the hotfix

For information and instructions on uninstalling this hotfix, see the article at the following URL:
http://www.symantec.com/docs/HOWTO73189

 

Troubleshooting

Please note that LiveUpdate may not work on Windows 7 computers with pcAnywhere 12.5. This is a known issue with pcAnywhere 12.5 and Windows 7. For information and instructions on installing LiveUpdate version 3.3, see the article at the following URL:
www.symantec.com/docs/TECH140001



You may receive the following error message during the MSI installation, "Error 1721. There is a problem with this Windows Installer package…". If you do, make sure that Microsoft Visual C++ runtime libraries are installed. For information on how to do this, see the article at the following URL:
www.microsoft.com/download/en/details.aspx?id=5638

 

FAQ

Q. If I have not installed the TECH179526, TECH179960, and TECH180472 hotfixes do I need to install both the TECH182142 hotfix and these hotfixes?

A. No. Just install this hotfix.

 

Q. Is this hotfix compatible with pcAnywhere rollup hotfix version 12.6.66 (www.symantec.com/docs/TECH159971)?

A. Yes.

 

Q. Is this hotfix compatible with pcAnywhere rollup hotfix version 12.5.0.49 (www.symantec.com/docs/TECH123841)?

A. No.



Q. Is this hotfix compatible with the Privacy Patch (www.symantec.com/docs/TECH138171)?
A. No.

 

Q. Is this hotfix compatible with pcAnywhere enhanced logging hotfix version 12.5.542 (www.symantec.com/docs/TECH168996)?

A. Yes.

 

Q. The instructions for this LiveUpdate require fewer updates than the instructions for TECH179960 and TECH180472. Why is that?
A. It requires fewer updates because the LiveUpdate for TECH182142 is a cumulative update that includes the fixes in TECH179526, TECH179960, and TECH180472. The LiveUpdate versions of the first three hotfixes were incremental and depended on the existence of the previous hotfix.

 

 


For more information, see the following articles:
Security Issue: Patching pcAnywhere’s vulnerabilities with Software Management in Symantec Management Platform
Uninstalling pcAnywhere
Disabling pcAnywhere
 


Attachments

PCAnywhere_12.x_Tech182142.zip (8 MBytes)
TECH182142_DK.pdf (289 kBytes)


TECH182142_FI.pdf (278 kBytes)
TECH182142_NL.pdf (288 kBytes)
TECH182142_NO.pdf (225 kBytes)
TECH182142_RU.pdf (377 kBytes)
TECH182142_SV.pdf (279 kBytes)


Article URL http://www.symantec.com/docs/TECH182142


Terms of use for this information are found in Legal Notices