vcs-win-Hotfix_5_1_00040_1650451

 Basic information
Release type: Hot Fix
Release date: 2009-12-08
OS update support: None
Technote: 337115 - Security Vulnerability with Symantec Veritas VRTSweb remote code execution/escalation of privilege
Documentation: None
Popularity: 952 viewed    downloaded
Download size: 2.17 MB
Checksum: 3077331815

 Applies to one or more of the following products:
Cluster Server 5.1 On Windows 32-bit
Cluster Server 5.1 On Windows IA64
Cluster Server 5.1 On Windows x64
Storage Foundation HA 5.1 On Windows 32-bit
Storage Foundation HA 5.1 On Windows IA64
Storage Foundation HA 5.1 On Windows x64

 Obsolete patches, incompatibilities, superseded patches, or other requirements:
None.

 Fixes the following incidents:
1650451

 Patch ID:
None.

Readme file
Date: 2009-11-19
OS: Windows
OS Version: 2003, 2008
Packages: Private_5_1_00040_1650451_x86.exe, Private_5_1_00040_1650451_x64.exe, Private_5_1_00040_1650451_ia64.exe
Etrack Incidents: 1650451
Errors/Problems Fixed: 
This private contains several security enhancements to the VCS VRTSweb module.
(e1650451)
Fixes Applied for Products: 
- Storage Foundation and High Availability Solutions 5.1 for Windows
- Storage Foundation and High Availability Solutions 5.1 AP1 for Windows 
- Veritas Cluster Server 5.1 for Windows
- Veritas Cluster Server 5.1 AP1 for Windows
Install/Uninstall Instructions:
Download the appropriate private executable to a temporary location on your system.
For Windows 2003 systems, this private requires Microsoft XML Core Services (MSXML) version 6.0. Make sure you install MSXML Core Services 6.0 before installing the private.
Refer to the following link for more information:
http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A-41B1-A9D2-64443913C976&displaylang=en
To install the hotfix using the GUI
------------------------------------
1. Double click the hotfix executable file to extract the contents to a default location on the cluster node.
On 32-bit systems, the files are extracted to:
"%commonprogramfiles%Veritas SharedWxRTPrivates"
On 64-bit systems, the files are extracted to:
"%commonprogramfiles(x86)%Veritas SharedWxRTPrivates"
The Hotfix Installer Wizard is automatically launched after all the files are extracted.
2. Click "Next" on the Welcome screen.
The Hotfix Installation Tasks panel lists the tasks that are performed by the installer. 
3. Click "Install Private" to install the hotfix.
The status of each task is updated as it gets completed.
4. After the tasks are complete, click "Next" and then click "Finish" to complete the installation process.
5. Repeat these steps for all the cluster nodes.
To install the hotfix using the command line
---------------------------------------------
1. At the command prompt run any of the following commands to extract the hotfix files to the default location:
C:	emp><PrivateName_Platform.exe> /x
or
C:	emp><PrivateName_Platform.exe> /extract
For example, to extract this hotfix on a 32-bit cluster node, the command is:
C:	emp>Private_5_1_00040_1650451_x86.exe /x
2. From the command prompt, navigate to the default location where the hotfix files are extracted.
On 32-bit systems, the files are extracted to:
"%commonprogramfiles%Veritas SharedWxRTPrivates"
On 64-bit systems, the files are extracted to:
"%commonprogramfiles(x86)%Veritas SharedWxRTPrivates"
3. At the command prompt, run the following command to install the hotfix:
VxHF.exe /install:<PrivateName> /silent
Here, <PrivateName> is the name of the private file without the platform and the .exe extension.
For example, to install this hotfix on a 32-bit cluster node, the command is:
VxHF.exe /install:Private_5_1_00040_1650451_x86 /silent
4. Follow the instructions displayed in the command prompt to complete the hotfix installation.
5. Repeat these steps for all the cluster nodes.
Additional notes
-----------------
- VxHF.exe logs are located at the following location:
"%allusersprofile%Application DataVeritasVxHF"
- For information on a list of hotfixes installed on the node, use the following command:
VxHF.exe /List
- For details about a particular hotfix, use the following command:
VxHF.exe /Display:<PrivateName>
Here, <PrivateName> is the name of the private file without the platform and the .exe extension.