WEF Security Update

In order to access product downloads, you must be a TDi customer with a valid login. To get a login please contact TDi Support.

Windows Event Forwarder Security Update (2.87 MB, ZIP)
For ConsoleWorks 3.2-0u0 and earlier. For more information, read the following:

Windows Event Forwarder (WEF) Buffer Overflow Vulnerability

Affected version:

Summary

Issue: The ConsoleWorks^® Client Windows Event Forwarder (WEF) 3.2-0u0 application was discovered vulnerable to a buffer overflow attack that could enable an attacker to take control of the host machine and gain administrative access to clients running Microsoft^® Windows^®.

Who Should Read This Document: Customers who use the WEF 3.2-0u0 on Windows-based clients.

Risk: High

Recommendation: Customers should install the latest WEF (version 3.2-0u2 or later) immediately.

Caveats: None

Security Update

Details

The WEF 3.2-0u0 application is running code that exhibits a classic buffer overflow vulnerability.

A vulnerability that could allow remote code execution. If a user with administrative privileges is logged on, an attacker exploiting this vulnerability could take control of an affected system. The attacker could install programs; view, change, or delete data; or create new accounts with full privileges

Resolution

A) Install the latest version of ConsoleWorks (3.2-0u1 or later), which contains a corrected version of the WEF.

OR

B) Uninstall WEF 3.2-0u0 and download and install the latest version of the WEF (3.2-0u2 or later).
 

Note:  TDi User name and Password required. To obtain User name and Password, contact TDi Support.

To uninstall WEF 3.2-0u0

To download WEF

To install WEF