ThinkVantage security issue

[schmaud]

Hi everyone,
it seems a good idea to update thinkvantage as soon as possible, since the used active X code seems to have a security issue:
http://www.heise.de/newsticker/meldung/76925 (german)
or:
http://archives.neohapsis.com/archives/ ... /0503.html

But the fix is already around:
http://www-306.ibm.com/pc/support/site. ... MIGR-65375

regards,

ralf

[egibbs]

I tried 3 times last night to install that fix using System Update, each time it failed.

Anyone else having problems?

I'm not entirely sure that the fix linked (for the "R2R.exe has encountered a problem and needs to close." issue has anything to do with the egatherer buffer overflow security hole. They seem at first glance to be completely separate issues.

Ed Gibbs

[ramian]

The ibmegath files which are downloaded when you install the ActiveX control are already at the latest version (3.20.0284.0) as stated in the 2nd link you provided above.

[unitedunited]

The ibmegath files which are downloaded when you install the ActiveX control are already at the latest version (3.20.0284.0) as stated in the 2nd link you provided above.

not sure I understand... so can one just download the file
(http://www-307.ibm.com/pc/support/IbmEgath.cab) listed on the neohapsis site above instead of the 18 MB R2R patch? I don;t run Rescue and Recovery so don't know why I'd need the patch just to fix egather...

[ramian]

I don't even think this the issue has got anything to do with R&R. The ibmegath files are used as an ActiveX control in IE for it to auto-detect your system type. Downloading the cab file and installing it from there didn't really register the appropriate dlls properly.

If you want to have the latest version installed, search and delete for "egath" and delete all files found. Then, go to the following link using IE and click on the Automatically detect my system link. The ActiveX download prompt should come up in the information bar at the top. Installing it from there should give you the latest version.
http://www.ibm.com/products/finder/us/e ... g=ddfinder

cheers!