Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta

[Bela Lubkin <belal () caldera com>]

I wrote:

> One of the README files on their site (I read it earlier today and
> didn't note the URL) says that a patched 3.2.1 version will be made
> available shortly.  They are not leaving you out in the cold.  You just
> need to wait a couple of days before resuming your practice of ssh'ing
> in to untrusted sites.

That URL was:

  http://www.vandyke.com/products/securecrt/security07-25-02.html

It's been revised since the quoted message -- it now shows availability
of SecureCRT 3.2.2, fixing this hole for holders of the oldest class of
SecureCRT license key.

> Bela<