Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta

From: VanDyke Technical Support (supportat_private)
Date: Mon Jul 29 2002 - 12:30:17 PDT

  • Next message: Peter Watkins: "Re: XWT Foundation Advisory"

    
     ('binary' encoding is not supported, stored as-is)
    In-Reply-To: <20020729163547.8536.qmailat_private>
    
    [Minor correction on upgrade eligibility dates]
    
    We have released versions of SecureCRT that address this 
    vulnerability.  This fix is available for ALL of our licensed 
    customers without charge.  VanDyke Software recommends that all
    users of SecureCRT upgrade immediately to the available versions.
    Updated installers are available on our website:
    
    Users who purchased SecureCRT licenses before January 1, 2000 
    (including users of SecureCRT 2.x) should upgrade to SecureCRT 
    3.2.2:
    
        http://www.vandyke.com/download/securecrt/3.2/index.html
    
    Users who purchased SecureCRT licenses before July 1, 2000 
    should upgrade to SecureCRT 3.3.4:
    
        http://www.vandyke.com/download/securecrt/3.3/index.html
    
    Users who purchased SecureCRT licenses before June 1, 2001 
    should upgrade to SecureCRT 3.4.6:
    
        http://www.vandyke.com/download/securecrt/index.html
    
    Users who purchased licenses on or after June 1, 2001 should 
    upgrade to SecureCRT 3.4.6 or SecureCRT 4.0 beta 3.
    
    SecureCRT 3.4.6:
    
        http://www.vandyke.com/download/securecrt/index.html
    
    SecureCRT 4.0 beta 3:
    
        http://www.vandyke.com/download/securecrt/beta.html
    
    
    For more information about this vulnerability and VanDyke
    Software's response to it, please visit our Security Advisory
    page:
    
        http://www.vandyke.com/products/securecrt/security07-25-02.html
    
    If there are any questions related to these releases, please 
    send email to supportat_private
    
    Thanks,
    
    -Daniel Prevett
     VanDyke Technical Support
     supportat_private
     http://www.vandyke.com
    



    This archive was generated by hypermail 2b30 : Mon Jul 29 2002 - 19:25:04 PDT