FlexNet vulnerability in version 11.13.1.0 and earlier

Flexera Software FlexNet Publisher, version 11.13.1.0 and earlier, lmgrd and custom vendor daemon servers contain a buffer overflow vulnerability that may be leveraged to gain code execution. Vulnerability Note VU#485744 on CERT describes “Flexera Software FlexNet Publisher lmgrd contains a buffer overflow vulnerability”.

Users of affected software should contact product vendors for update information.

I checked if Autodesk has released an update but nothing so far. Check with your vendors and contact them if they have not provided an update.

ANSYS does have an update for this.

When there is an update for FlexNet ready from your vendor I foresee no problem to use JTB FlexReport or JTB FlexReport LT with it. Lmutil.exe that is in the JTB FlexReport folder or the folder where JTB FlexReport LT.exe is located could be updated but should not be affected by this vulnerability.

UPDATE March 3, 2016: Autodesk has released 11.13.1.2 and is available here.

JTB FlexReport 10.0 released

JTB FlexReport 10.0 has been released. JTB FlexReport is a solution for monitoring network license usage and software usage in general. With its reports you are in a better position to know the actual usage of often expensive licenses. You will easier predict when and how to handle the need of increases or decreases of your licenses.

Here’s a chart showing usage for the last month. The Chart Client is easier to use now because depending on report type, settings that are not relevant to that report type are hidden.

Notice a welcome feature making it much easier to create commonly used charts. Make favorites and access them quickly.

Here are downloads.

Here’s the revision history describing when is new and fixed in this release.

Thhis update is for all customer with current maintenance agreement. If yours has expired you’re welcome to renew it.

Contact us to get a time limited license file for free. You can try it in your environment with your real data for a few weeks with full functionality. Support is free so if you run into any questions we’re here to help you.