Openssl vulnerability -- Adobe Connect 8.2

What is the supported patch / fix for Adobe Connect 8.2 and Openssl vulnerabilities discovered over the last few months?  I'm assuming it is due to an old stunnel implementation.
The remote service accepted an SSL ChangeCipherSpec message at an incorrect point in the handshake 
leading to weak keys being used, and then attempted to decrypt an SSL record using those weak keys.
CVE-2010-5298

CVE-2014-0076

CVE-2014-0195

CVE-2014-0198

CVE-2014-0221

CVE-2014-0224
CVE-2014-3470

You should go and download the Stunnel application and replace the version included with Connect 8.2. stunnel: Downloads
So you are aware, Connect 9 and newer installers no longer come with Stunnel, So you will need to go to Stunnel's site to download the latest version when upgrading (unless you are already on the latest version).

Similar Messages

  • How to generate a SSL certificate for Adobe Connect?

    My organization uses adobe connect across the internet and we
    would like to enable SSL on the server. I have instructions for
    enabling SSL once a CSR is generated, but I do not know how to
    actually generate the CSR using Adobe Connect.
    Any info on how to generate a SSL CSR would be great,
    thanks.

    There is no 'built-in' method in Connect to do this. We used
    a open-source product called OpenSSL to generate our CSR file for
    Connect. Just Google OpenSSL and download/install it (it's free).
    Then use something like this command for creating a cert:
    openssl
    req -new -key <exisiting private key file> -out <csr
    file you want to make>
    Example:
    OpenSSL> req -new -key privatekey.pem -out connectcert.csr
    After you get the new certificate from the CA, put in
    d:\breeze directory. Then update the adaptor.xml file with the new
    cert name (make sure backup the existing file).
    Make sure you REBOOT the server to enable changes! Simply
    restarting services will not work.
    Hope this helps!

  • "potentially vulnerable" Adobe servers?

    I am seeing multiple errors in the Firefox vs. 3.63 browser's Error Console indicating "potentially vulnerable" Adobe servers, Here are a few:
    acrobat.com : potentially vulnerable to CVE-2009-3555
    w09p-0.acrobat.com : potentially vulnerable to CVE-2009-3555
    acrobat.com connectnow : potentially vulnerable to CVE-2009-3555  (This one I'm having to remember as best as I can because it disappeared before I could copy it but it did reference the connectnow server)
    Researching this further, I find the following information at this site: http://support.mozilla.com/nl/forum/1/635353 :
    "www.server.com : Potentially vulnerable to CVE-2009-3555"
    "means:
    1. the server.com is vulnerable to a MITM attack discovered in 2009.
    MANY servers are currently vulnerable.
    2. mozilla is now able to test it, and the team is actually finding the best way how to inform the user.
    3. This is Firefox identifying the https servers that are vulnerable to a renegotiation Man-in-the-Middle attack, Firefox gained this ability to make such identifications in 3.6.2, so this info is to be passed on to the webmasters of the servers shown, as it's an exploit of the TLS protocol that needs to be fixed on the server side. "
    You should put pressure on server.com to remove the vulnerability.
    (And perhaps do not use it with passwords, until its fixed :-)
    More info
    https://wiki.mozilla.org/Security:Renegotiation
    https://bugzilla.mozilla.org/show_bug.cgi?id=535649 "
    So, consider this "pressure".  What is the danger of customers using adobe connectnow (for example) with this apparent browser vulnerability?  What, if anything, can be done to avoid any related security problems? What is Adobe doing to "remove the vulnerability"?
    In another Adobe thread, I found a "conclusion" that this was due to a Firefox bug, but further info I found seems to indicate that users must also update their servers to eliminate the error messages.
    In this regard, I found this information at: https://bugzilla.mozilla.org/show_bug.cgi?id=555952 :
    "The issue is, the warnings in Firefox won't go away until you upgrade to
    hardware/software that supports RFC 5746.
    If you have disabled renegotiation on the server, the connection is safe, but
    the browser doesn't know.
    If you want the warnings to go away, please strive to upgrade your
    hardware/software. Please push your vendor to provide equipment or updates that
    supports RFC 5746."

    You can't suppress that error message.
    Future Firefox versions may even block access to websites that haven't updated their security.
    See [https://bugzilla.mozilla.org/show_bug.cgi?id=549641 Bug 549641] – Firefox raises alarm (in error console) about SSL servers being vulnerable to CVE-2009-3555
    You can hide the error messages with these two extensions:
    Console2: https://addons.mozilla.org/firefox/addon/1815
    Error Console Message Remover: https://addons.mozilla.org/firefox/addon/109239/

  • Adobe Connect Desktop App

    Hi,
    This is probably a simple fix for someone in Adobe. I'm trying to download the latest Adobe Connect Desktop Application for Windows.
    The download link keeps going to connectusers.com which is down for reasons known.
    Is there another link to download from?
    Thanks

    Just sharing a quick search tip to help in the future.
    I just ran this search query https://www.google.com/search?q=adobe+connect+desktop and the description of the second search result is "Adobe Connect Desktop. This AIR-based application helps meeting hosts quickly manage and edit their meetings from their desktop. Hosts can also access ..."
    In case you get stuck while searching, you can always use the search keyword 'site' (read here) to narrow down your search to adobe.com like this.

  • How can I get my web cam to work in Adobe Connect ?

    This is actually an end user's question that I am having trouble answering to...
    We use Adobe Connect to give online language classes, the end user is one of the students.
    I cannot find the right Support answer to give him.
    Problem:
    My camera does not work when I connect to Adobe's rooms but camera works fine with other software.
    Even though I suspected my old camera was working fine, yesterday I went ahead and bought a new camera. 
    I thought perhaps my webcam software may have been a problem, so I bought a different type camera with different software. 
    Even after removing all the old software, same result:  
    I surmised the problem might be caused by my firewall and security software, so once I tried changing the permissions for Adobe, and my Webcam, but that didn’t work.   
    Another time, I restarted my computer right before class and then turned off my firewall completely so there would be no interference but to no avail. I’m totally perplexed.  
    Isn’t there anyone else experiencing a similar problem?   Has anyone else found a solution? 
    I run Windows Vista with McAfee Internet Security Software.  I always reboot the computer before class and open no other programs other than Google Chrome. 
    I now have a brand new Microsoft LifeCam Cinema Camera with LifeCam 3.5 Webcam Software. 
    I test my camera before going online.  It always works fine.   Then I shut down the camera program and login into class.   
    When I “connect webcam” in the room, the light on my camera comes on (suggesting that it is ON), but only a black image is transmitted to the room.

    Check to see if you have Google Voice installed. If so, remove it and see
    if your problem vanishes. If not Google Voice, check to see if you have
    any other communications software which interacts with your cam and
    disable it. This was the problem I had with a similar problem on a Mac.
    MosesJOI <[email protected]>
    10/13/11 12:08 PM
    Please respond to
    [email protected]
    To
    jsb152 <[email protected]>
    cc
    Subject
    How can I get my web cam to work in Adobe Connect ?
    Re: How can I get my web cam to work in Adobe Connect ?
    created by MosesJOI in General Discussion - View the full discussion
    Thanks a lot Heyward for the swift reply !
    I sent the advice out to the end user, but unfortunately this wasn't the
    solution.
    His reply is below :-
    The default resolution of my new camera is already set at 640x360, but I
    went ahead and tried several lower resolutions (e.g. 424x240; 320x240; and
    160x120) but none worked in the room - camera still showed up as black
    blank screen.  Also, as far as I can tell, I don’t have the option of
    adjusting the frame rate.
    I started playing around with my Internet Security Settings to see if they
    might be playing a role. So far, all to no avail.
    Hmm...quite a tricky one - webcams always are - maybe if he can find a way
    to adjust the frame rate (?).
    He's going to fiddle about with the settings a bit more and see if
    something does the trick.
    If anyone has had a similar problem and found an ingenious solution,
    please jot on a note on this thread.
    Replies to this message go to everyone subscribed to this thread, not
    directly to the person who posted the message. To post a reply, either
    reply to this email or visit the message page: [
    http://forums.adobe.com/message/3969561#3969561]
    To unsubscribe from this thread, please visit the message page at [
    http://forums.adobe.com/message/3969561#3969561]. In the Actions box on
    the right, click the Stop Email Notifications link.
    Start a new discussion in General Discussion by email or at Adobe Forums
    For more information about maintaining your forum email notifications
    please go to http://forums.adobe.com/message/2936746#2936746.

  • How can I get Adobe connect to work with 10.7.5?

    When I do an Adobe connect using my MacBookPro running 10.7.5, the person on the other end does not get anything visible, except a moving cursor. Ever since I upgraded to 10.7.5, my Adobe Connect does not work correctly. Any suggestions?
    Thanks!

    Is this the site that you're using for the download?
    https://get.adobe.com/reader/
    Note: you've posted your question in the wrong area, as it has nothing to do with "Mac Pros." And, you have a MacBook Pro.

  • How, using Adobe Connect can increase the number of participants in the meeting? I need more than 25 people.

    Hi, I use licensed Adobe Connect. Earlier in the meeting could involve up to 100 people. Now only 25. How, using Adobe Connect can increase the number of participants in the meeting? I need more than 25 people.
    Thanks for your help.

    The purchasing option through adobe.com only allows up to 25 attendees. If you need more than that, you will need to purchase through a reseller. You can find one that is able to sell in your part of the world, here: Adobe Connect Partners. Just reach out to one of the Global Partners.

  • How do I link to an Adobe Connect webinar recording?

    What is the correct procedure for linking to a recorded Adobe Connect webinar from within Captivate 6? We have a URL to the webinar we did but it does not work using the video link tools in Captivate 6.

    hi carlozezza,
    here's how i do it:
    • create your button. This can be anything form text, graphic, image to a photoshop .psd
    • on the second line of tools at the top of your muse document, look for "Hyperlinks:" this is in blue to indicate it's a drop down menu
    • on it's drop down, select "Open link in a new browser or tab" this will make it easy for people to get back your website
    • next to the "Hyperlinks:" the is a field that says "Add or filter links"
    • type in your external website URL address in that field
    • note, it must have the http:// befor the URL to work
    hope this helps
    -s

  • How can I find the IP address of guest users who log on to my Adobe Connect Meeting?

    We had an Adobe Connect meeting that was open for guest users to log in under generic user names. Does the Adobe Connect meeting log keep the IP address or other identifiable information for these guest users?

    Footprints will track and report the User IP's.
    http://www.refineddata.com/index.php?option=com_content&view=article&id=62:footprints&cati d=43:custom-pods&Itemid=62

  • Adobe Connect issues with Windows 7

    Has anyone found a solution to the problems Adobe Connect has with Windows 7?

    Sounds like something is blocking network traffic. I'm not aware of any Windows 7 specific issues. I've used Windows 7 with connect for 2 years with no Windows specific issues.
    I'd call support at 800-945-9120 and see if they can indentify the issue and give you a resolution.

  • Adobe connect add in not showing up in Privacy Settings Mac OS X Yosemite

    When I try to share a screen, I am told to click the ENABLE button. I'm taken to System Preferences where I navigate to the Privacy Settings, Accessibility, and I'm instructed to enable adobeconnectaddin.  The problem is, adobeconnectaddin is not showing up in this window. I see Skype, which is not enabled, and that's all I see.
    Any suggestions? Thanks in advance

    As of March 9th, Mac OSX 10.10 will be supported.
    Adobe wrote:
    We are adding support for the following:
    Client systems:
    Mac OS X 10.10
    Ubuntu 14.04
    OpenSUSE 13.1
    There isn't more information about what changes that means, but the release notes for 9.4 are here: Adobe Connect Help | Adobe Connect 9.4 Release Notes

  • Flash Video problem on Adobe Connect 9

    Hi Folks
    having an issue I am hoping to get some light shed on - I am downloading content from an Adobe Connect 8 server and uploading to Adobe Connect 9 server in a seperate domain.  All has been working fine except for Flash Videos - anytime I upload a flash video (FLV) format and attemt to access it eitehr directly on the server or remotly get a grey screen.  Is there any particular add ons required to enable flash video to work with Adobe Connect 9 , using Flash 10, OS is Windows 2008 R2
    thanks in advance
    Paul C

    Nope. Looks good though and glad you got it sorted.
    --Nancy O.
    Alt-Web Design & Publishing
    www.alt-web.com
    "Nancy - Adobe Comm. Expert" <[email protected]> wrote
    in message
    news:f6efg8$mqv$[email protected]..
    > Okay .. my problem turned out to be a mimetype that
    needed to be added on
    > the server at CrystalTech. They added it and now my
    Flash Video works. I
    > have added Flash video to many CrystalTech accounts in
    the past and this
    has
    > never happened. I am not sure why it wasn't already on
    this account as
    this
    > was a premium account .. I guess I should have gotten
    the cheap one. :)
    >
    > Have others had this problem with their hosts? I wasted
    a couple of hours
    > thinking the problem was me and it was not.
    >
    > Nnacy
    >
    >

  • Adobe Connect not recognizing my DV camera

    Adobe Connect no longer will recognize my DV cameras (XL2 and GL2) via firewire 400 on a mac computer (os 10.7.5). I have tried signing in using the ?launcher=false  idea and I have installed the addin for adobe connect and os 10.7.2. Nothing works. Have tried different cables and camera's and macs.

    I am having the same problem - My Canon DV camera was working fine up until recently.  Wondering if it is a problem with Mountain Lion

  • Where can I download old version of adobe connect mobile app?

    We are using old version of Adobe connect Pro (version <7.5)
    The recent version of Adobe connect mobile app does not work with our server.
    I want to get old version of  adobe connect mobile app.
    Thanks,
    JD Park

    If you are producing software how do you detect the Firefox version and show whether or not it is compatible ? You may be interested in http://hacks.mozilla.org/2012/01/firefox-goes-2-digit-time-to-check-your-ua-sniffing-scripts/
    If you are, or your clients are in a corporate environment there is a possibility that Firefox ESR will be in use.
    * https://wiki.mozilla.org/Enterprise#How_to_Participate_and_Post
    * http://www.mozilla.org/en-US/firefox/organizations/
    My understanding is that ESR has been brought out primarily to deal with this sort of problem ensuring software may be certified in an enterprise, and does not change as often (so it will remain as Firefox 10 with point releases for a while).

  • Adobe Connect Desktop - just doesn't download recordings any more...

    Hi all,
    Has anyone had issues since the upgrade of this?
    I have made the recordings downloadable in all places thru the adobce connect admin area, but when using the desktop client evcewn though i am able to search for the file i am not however able to download it.
    The recording does appear in the download queue but does not initiate. This is just unacceptable.
    Part of the service is to be able to playback the meeting recordings and while i know i can do this online, it would also be useful to USE ADOBE'S PRODUCTS TO VIEW ADOBE'S BESPOKE RECORDINGS (Since they are not available in any other downloadable format, wouldn't midn so much if it just worked for once without issues.)
    Add this to the whole "Adobe Presenter - the worlds most unstable and bugged out piece of software ever"
    Come on Adobe, whats happening to your stuff?!?

    Adobe Connect Desktop is no longer supported with Connect 9. However, it should still work. Also, be sure that the recording has been set to allow local downloads.

Maybe you are looking for