Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta

[kelli burkinshaw <kelli.burkinshaw () vandyke com>]

In-Reply-To: <20020722200944.A6030 () SirDrinkalot rm-f net>

Hello Kyuzo,

This is the first VanDyke Software has heard of the problem you 
reported.  We take these issues seriously--making fixes available 
to our customers as soon as possible.  We have identified the area 
of code where the problem exists and will be posting fixes for both
SecureCRT 3.4 and 4.0 to our website (www.vandyke.com) as soon as 
possible.

It should also be noted that this problem is specific to SSH1 and
does not happen when SSH2 is selected as the protocol from SecureCRT.

Thank you for bringing this to our attention.  For future reports,
feel free to send them directly to VanDyke Software 
(support () vandyke com).  

kelli burkinshaw
Product Director
VanDyke Software