Posts Tagged ‘security’

SecureCRT 5.2 Final is out!

Tuesday, October 10th, 2006

SecureCRT 5.2 ScreenshotWhat comes following SecureCRT 5.2 Beta 4? Well, of course, it’s SecureCRT 5.2 FINAL; as I suspected back then, we were really close to the final version, actually just a week away.

Vandyke did not publish much info about the changes since Beta 4, only a minor bugfix was mentioned.

The complete list of new features, changes and bug fixes for 5.2 is quite long, so I’ve included it below.


Here’s a few highlights for the impatient/lazy:

- Several new networking features (support for unauthenticated/basic HTTP proxies, support for telnet over SSL)
- Improvements to the scripting system (allows interaction with tabs)
- A few user interface related niceties (option to make CTRL-TAB switch to the most recently used tab, paste on right click, display session connected time in status bar)
- Various SSH1/SSH2 protocol implementation improvements

Read on if you want more… or click to jump to the download section.

*** WHAT’S NEW INVANDYKE SECURECRT 5.2 ***

Changes in SecureCRT 5.2 (Official) — October 10, 2006


Bug fixes:
- Blank lines could not be used to end the header in a script.

Changes in SecureCRT 5.2 (Beta 4) — October 3, 2006


Bug fixes:
- SecureCRT crashed when cycling through tabbed sessions if one of
the tabs had been disconnected and was in the process of
connecting to a different server.
- When SecureCRT was integrated with SecureFX, double clicking a
transfer-only session in the Connect dialog did not launch
SecureFX.
- RLogin: RLogin connections failed if the Log File option “Prompt
for filename” was set.
- SSH2: SecureCRT crashed if the Public Key Assistant was launched
before the connection had completed.

Changes in SecureCRT 5.2 (Beta 3) — September 21, 2006


Changes:
- Added the script property Tab.Caption, which allows getting and
setting a tab’s caption.
- Increased the size of the authentication, key exchange, ciphers,
and MACs list boxes in order to eliminate the scrollbars.
- Added a maximize button to the Connect dialog.

Bug fixes:
- Toggling the ANSI Color option did not immediately take effect
like it did in previous versions.
- If SecureFX was integrated with SecureCRT, SecureCRT crashed if a
file type that did not have an associated extension was edited.

Changes in SecureCRT 5.2 (Beta 2) — September 7, 2006


Changes:
- The Session Options dialog was made larger so that there are
no scrollbars in the Category tree.
- SSH2: Changed the default compression to “None”. This only
affects new installations.

Bug fixes:
- SecureCRT crashed on Windows 2003 after connecting to a group
of sessions and then quickly closing the sessions.
- Newly created sessions launched in a new window had 16 rows
instead of 24 rows, which is the default.
- The SecureCRT 5.1 entry was not removed from the Start menu
after upgrading to 5.2.
- If the tab name was set from the tab context menu, it was not
possible to set the tab name from a script.
- Clicking the toolbar with both the left and right mouse buttons
simultaneously caused SecureCRT to stop responding to mouse
clicks.
- SSH1: SSH1 sessions were disconnected after issuing an “ls”
command and over 150 files were listed.

Changes in SecureCRT 5.2 (Beta 1) — August 22, 2006


New features:
- Added support for unauthenticated and basic HTTP proxies.
- Added script functions to support working with tabs. These
functions allow scripts to connect tabs, connect SFTP tabs,
clone tabs, activate tabs, and close tabs.
- Added a /T command-line option that supports launching sessions
in tabs. This flag can be used with /S and with sessions that
are not in the session database, such as URLs.
- Added a global option to have CTRL+TAB switch to the most
recently used tab.
- Tab control displays tooltips (or hover text) to show the full
tab label.
- Added support for Telnet over SSL.
- Added a global option to paste on right mouse click.
- Added a global option to display the elapsed time for connected
sessions in the status bar.
- Added a session option to translate incoming CRs to CRLF.
- Added a session option to map ANSI line drawing characters to
“+”, “”, etc. when they are copied to the clipboard.
- Added a global INI-file only option “ZModem Force All Caps
Filenames to Lower Case on Upload”, which specifies whether or
not all caps filenames should be converted to lowercase during
a Zmodem upload.
- SSH2: Enhanced X.509 host-key support by validating X.509 host-
key certificates.
- SSH1/SSH2: Added /ACCEPTHOSTKEYS command-line parameter to
SecureCRT, which causes host keys to be automatically accepted.

Changes:
- Removed the command-line clients VSH, VCP, VSFTP, VPKA, and
VKEYGEN from the installer. These clients will be available as
a separate package.
- If the global setting “Show connection closed dialog” is off,
the reconnect dialog will not be displayed when the network is
disconnected.
- Added a global and session printing option to force black on
white printing.
- SecureCRT handles ] R in Linux terminal mode.

Bug fixes:
- If an HTTP proxy was being used and the session was disconnected
before the hostname was resolved, CPU usage went up to 100%.
- Changing a session’s protocol from Telnet to SSH2 did not change
the port number like it did in SecureCRT 5.0 and prior versions.
- The “Color Schemes.ini” file could get corrupted when multiple
instances of SecureCRT were launched.
- If display changes were made, such as showing or hiding the tab
bar or chat window, the window size was incorrect when subsequent
session windows were launched.
- If SecureFX was integrated with SecureCRT and the SecureFX path
specified in the Global.ini file pointed to a 2.x version or an
invalid path, the error “Show Terminal Only session while running
SecureFX” was displayed.
- When editing the default session and a tab other than the first
tab was active, the “Apply change to all sessions?” prompt was
displayed even if no changes were made.
- When Midnight Commander was running and the session was using
Xterm emulation, clicking the mouse beyond the 80th column
generated garbage.
- SecureCRT was inaccessible if it was minimized from a script
when a dialog, such as the Connect dialog, was being displayed.
- Cancelling a script did not report the line number where the
script was cancelled like it did in versions prior to 5.0.
- Fixed the following tests in vttest that SecureCRT had been
failing.
- Line-drawing tests in “Test of double-sized characters” set.
- Request terminal parameters test in “Test of terminal
reports” set.
- Scrolling region and column mode escape sequence test in
“Test of known bugs” set.
- Upgrading to a newer version of SecureCRT did not remove the
old entry in Add/Remove programs.
- SSH2: SecureCRT could not validate the server’s x.509 DSA host
key when the key was not encoded using ASN.1 (F-Secure and SSH
Communications servers).
- SSH2: SecureCRT could not validate the server’s X.509 RSA host
key if the server used the SHA-1 hash (later versions of
F-Secure and SSH Communications servers).
- SSH2: If an incorrect username was entered in the username
prompt dialog and the “Save username” check box was unchecked,
this check box was incorrectly checked when re-prompting for
the username.
- SFTP: SecureCRT crashed when using tab to complete a filename
in an SFTP tab.

*** RELEVANT LINKS ***

Download SecureCRT 5.2 Final (.exe installer – 7.44MB)
Check out the SecureCRT product page
Visit the VanDyke homepage

Fourth beta of SecureCRT 5.2 published!

Tuesday, October 3rd, 2006

SecureCRT 5.2 Screenshot Striving to stay true to my promise of not missing another SecureCRT Beta ever again, I give you version 5.2 Beta 4.

This build is not much of a deal actually; a few bugs have been ironed out, while no real changes have been implemented. The whole release gives me the feel we’ll see the final version pretty soon.
The addressed flaws are related to the UI (tabs), SecureFX’s integration with SecureCRT, failed Rlogin connections and SSH2/Public Key Assistant. See the whole thing below in the complete changelog…

*** WHAT’S NEW INVANDYKE SECURECRT 5.2 BETA 4 ***

Bug fixes:
- SecureCRT crashed when cycling through tabbed sessions if one of
the tabs had been disconnected and was in the process of
connecting to a different server.
- When SecureCRT was integrated with SecureFX, double clicking a
transfer-only session in the Connect dialog did not launch
SecureFX.
- RLogin: RLogin connections failed if the Log File option “Prompt
for filename” was set.
- SSH2: SecureCRT crashed if the Public Key Assistant was launched
before the connection had completed.

*** RELEVANT LINKS ***

Download SecureCRT 5.2 Beta 4 (.exe installer – 7.44MB, MD5=97C75CFDF9008380EFE8B7A543CFD2BD)
Check out the SecureCRT Beta page
Visit the VanDyke homepage

Third beta of SecureCRT 5.2 published!

Thursday, September 21st, 2006

SecureCRT 5.2 Screenshot So I unbeliavably missed SecureCRT 5.2 so far.. shame on me. Still, here’s the latest beta, fresh out of the oven today: 5.2 Beta 3.

Beta 3 fixes a couple of bugs (one of which caused the program to crash) and introduces a few changes, mainly minor GUI improvements, and a new feature to the scripting system.

Similarly, Beta 2, focused on fixing some flaws (one of which, again, caused a crash on Windows 2003 systems) targeting GUI issues and the SSH1 protocol implementation. The significant changes affect the default compression option for SSH2, which is now set to “none” for new installations of SecureCRT.

The real treats were introduced by Beta 1:
- Several new networking features (support for unauthenticated/basic HTTP proxies, support for telnet over SSL)
- Improvements to the scripting system (allows interaction with tabs)
- A few user interface related niceties (option to make CTRL-TAB switch to the most recently used tab, paste on right click, display session connected time in status bar)
- Various SSH1/SSH2 protocol implementation improvements

Beta 1 also enforced some changes, of which the most interesting is the removal of the command-line clients VSH, VCP, VSFTP, VPKA, and VKEYGEN from the standard installer. The changelog claims they will be later included in a separate package, but is this package goind to be free or included in the SecureCRT fee? I guess we’ll have to wait and see…

Bugfixes in SecureCRT 5.2 Beta 1 range from critical ones (“If an HTTP proxy was being used and the session was disconnected before the hostname was resolved, CPU usage went up to 100%”) to minor (“Upgrading to a newer version of SecureCRT did not remove the old entry in Add/Remove programs”). Aaand as always, there are the usual SSH protocol implementation fixes.

Read all about the changes in the detailed changelog posted below.

*** RELEVANT LINKS ***

Download SecureCRT 5.2 Beta 3 (.exe installer – 7.44MB, MD5=F3D88CA5C70E674D2DA9AC0436689DD2)
Check out the SecureCRT Beta page
Visit the VanDyke homepage

*** WHAT’S NEW IN SECURECRT 5.2 BETA 1 ***
September 21, 2006

Changes:
- Added the script property Tab.Caption, which allows getting and
setting a tab’s caption.
- Increased the size of the authentication, key exchange, ciphers,
and MACs list boxes in order to eliminate the scrollbars.
- Added a maximize button to the Connect dialog.

Bug fixes:
- Toggling the ANSI Color option did not immediately take effect
like it did in previous versions.
- If SecureFX was integrated with SecureCRT, SecureCRT crashed if a
file type that did not have an associated extension was edited.

*** WHAT’S NEW IN SECURECRT 5.2 BETA 2 ***
September 7, 2006

Changes:
- The Session Options dialog was made larger so that there are
no scrollbars in the Category tree.
- SSH2: Changed the default compression to “None”. This only
affects new installations.

Bug fixes:
- SecureCRT crashed on Window 2003 after connecting to a group
of sessions and then quickly closing the sessions.
- Newly created sessions launched in a new window had 16 rows
instead of 24 rows, which is the default.
- The SecureCRT 5.1 entry was not removed from the Start menu
after upgrading to 5.2.
- If the tab name was set from the tab context menu, it was not
possible to set the tab name from a script.
- Clicking the toolbar with both the left and right mouse buttons
simultaneously caused SecureCRT to stop responding to mouse
clicks.
- SSH1: SSH1 sessions were disconnected after issuing an “ls”
command and over 150 files were listed.

*** WHAT’S NEW IN SECURECRT 5.2 BETA 3 ***
August 22, 2006

New features:
- Added support for unauthenticated and basic HTTP proxies.
- Added script functions to support working with tabs. These
functions allow scripts to connect tabs, connect SFTP tabs,
clone tabs, activate tabs, and close tabs.
- Added a /T command-line option that supports launching sessions
in tabs. This flag can be used with /S and with sessions that
are not in the session database, such as URLs.
- Added a global option to have CTRL+TAB switch to the most
recently used tab.
- Tab control displays tooltips (or hover text) to show the full
tab label.
- Added support for Telnet over SSL.
- Added a global option to paste on right mouse click.
- Added a global option to display the elapsed time for connected
sessions in the status bar.
- Added a session option to translate incoming CRs to CRLF.
- Added a session option to map ANSI line drawing characters to
“+”, “”, etc. when they are copied to the clipboard.
- Added a global INI-file only option “ZModem Force All Caps
Filenames to Lower Case on Upload”, which specifies whether or
not all caps filenames should be converted to lowercase during
a Zmodem upload.
- SSH2: Enhanced X.509 host-key support by validating X.509 host-
key certificates.
- SSH1/SSH2: Added /ACCEPTHOSTKEYS command-line parameter to
SecureCRT, which causes host keys to be automatically accepted.

Changes:
- Removed the command-line clients VSH, VCP, VSFTP, VPKA, and
VKEYGEN from the installer. These clients will be available as
a separate package.
- If the global setting “Show connection closed dialog” is off,
the reconnect dialog will not be displayed when the network is
disconnected.
- Added a global and session printing option to force black on
white printing.
- SecureCRT handles ] R in Linux terminal mode.

Bug fixes:
- If an HTTP proxy was being used and the session was disconnected
before the hostname was resolved, CPU usage went up to 100%.
- Changing a session’s protocol from Telnet to SSH2 did not change
the port number like it did in SecureCRT 5.0 and prior versions.
- The “Color Schemes.ini” file could get corrupted when multiple
instances of SecureCRT were launched.
- If display changes were made, such as showing or hiding the tab
bar or chat window, the window size was incorrect when subsequent
session windows were launched.
- If SecureFX was integrated with SecureCRT and the SecureFX path
specified in the Global.ini file pointed to a 2.x version or an
invalid path, the error “Show Terminal Only session while running
SecureFX” was displayed.
- When editing the default session and a tab other than the first
tab was active, the “Apply change to all sessions?” prompt was
displayed even if no changes were made.
- When Midnight Commander was running and the session was using
Xterm emulation, clicking the mouse beyond the 80th column
generated garbage.
- SecureCRT was inaccessible if it was minimized from a script
when a dialog, such as the Connect dialog, was being displayed.
- Cancelling a script did not report the line number where the
script was cancelled like it did in versions prior to 5.0.
- Fixed the following tests in vttest that SecureCRT had been
failing.
- Line-drawing tests in “Test of double-sized characters” set.
- Request terminal parameters test in “Test of terminal
reports” set.
- Scrolling region and column mode escape sequence test in
“Test of known bugs” set.
- Upgrading to a newer version of SecureCRT did not remove the
old entry in Add/Remove programs.
- SSH2: SecureCRT could not validate the server’s x.509 DSA host
key when the key was not encoded using ASN.1 (F-Secure and SSH
Communications servers).
- SSH2: SecureCRT could not validate the server’s X.509 RSA host
key if the server used the SHA-1 hash (later versions of
F-Secure and SSH Communications servers).
- SSH2: If an incorrect username was entered in the username
prompt dialog and the “Save username” check box was unchecked,
this check box was incorrectly checked when re-prompting for
the username.
- SFTP: SecureCRT crashed when using tab to complete a filename
in an SFTP tab.

Vandyke Releases SecureCRT 5.1.4 (Build 285). Download now!

Friday, September 15th, 2006

SecureCRT 5.1.4 Screenshot Note: There is a newer version of this software product: SecureCRT 5.2 final.

A new bugfix update has been released for Vandyke
SecureCRT 5.1, the highly acclaimed security and remote administration suite.

SecureCRT 5.1.4, which includes GUI and command line tools for connecting to servers via SSH (v1 and v2), Telnet, Rlogin and other communication protocols, has been improved with fixes that target a crash issue when SecureCRT was incorrectly called from a cmd.exe command line prompt and using UNC/Samba file paths for logging.

Another change affects the SSH2 protocol implementation: the default compression setting for new SecureCRT installation is not set to “None”.

Check the full changelog below for more details.

*** WHAT’S NEW IN SECURECRT 5.1.4 ***

Changes:
- SSH2: Changed the default compression to “None”. This only affects new installations.

Bug fixes:
- SecureCRT crashed when the command to launch it from Cmd.exe was incorrect.
- It was not possible to specify a UNC path (Samba) for a log file.

*** RELEVANT LINKS ***

VanDyke Homepage
Download SecureCRT 5.1.4 (.exe – 8.92MB, MD5=8CAF9194793066ED24816435F835BA39)
SecureCRT Product Page
General What’s New page for VanDyke products

Vandyke Releases SecureCRT 5.1.3 (Build 281). Download now!

Tuesday, July 25th, 2006

SecureCRT 5.1.3 Screenshot A new bugfix update has been released for Vandyke SecureCRT 5.1, the highly acclaimed security and remote administration suite.

SecureCRT 5.1.3, which includes GUI and command line tools for connecting to servers via SSH (v1 and v2), Telnet, Rlogin and other communication protocols, has been improved with fixes that affect several aspects of the GUI (graphical user interface), some terminal emulation options and parts of the SSH1 protocol implementation.

Other minor changes include removal of older SecureCRT versions from the Control Panel “Add/Remove Programs” appliance and small changes to the Quick Connect dialog.

A significant change regarding SSH1 is that compression is now turned off by default for newly created connections that use this protocol.

Check the full changelog below for more details.

*** WHAT’S NEW IN SECURECRT 5.1.3 ***

Changes:
- SSH1: Compression is now off by default.

Bug fixes:
- Reduced the time it takes for the Connect dialog to display, which was noticeable on a network or USB drive.
- Running a script that modified the ANSI colors caused SecureCRT to crash.
- When CTRL+TAB was used to switch between tabs, the scrollbar had the position of the most recently active tab rather than the previous position for that tab.
- The keymap assignments changed when there were multiple tabs and a session in a tab other than the first tab was reset.
- It was not possible to specify a UNC path (Samba) for a log file as it was in versions prior to 5.0.
- In SecureCRT 5.1.2, it was not possible to disable “Send initial carriage return” in Logon Scripts as in previous versions.
- Upgrading to a newer version of SecureCRT did not remove the old entry in Add/Remove programs.
- SSH1: Under certain circumstances, SSH1 port forwarding ended abruptly.
- SSH1: When generating an RSA key for an SSH1 session, if the user did not have write permissions for the specified save folder, SecureCRT crashed.
- SSH1: The NO-OP anti-idle option caused random characters to be sent to Cisco ISR routers. The “Send protocol NO-OP” session option can now be turned off for SSH1 sessions.
- SSH1: It was not possible to specify the DES cipher from the command line for SSH1 sessions.
- VSFTP: If the “version” command was issued when VSFTP was not connected to a session, VSFTP crashed.

*** RELEVANT LINKS ***

VanDyke Homepage
Download SecureCRT 5.1.3 (.exe – 8.91MB)
SecureCRT Product Page
General What’s New page for VanDyke products

Vandyke SecureCRT 5.1.2 (Build 274) Officially Released for Download

Thursday, May 25th, 2006

SecureCRT 5.1 ScreenshotA new bugfix update has been released for Vandyke SecureCRT 5.1, the highly acclaimed security and remote administration suite.

SecureCRT 5.1.2, which includes GUI and command line tools for connecting to servers via SSH (v1 and v2), Telnet, Rlogin and other communication protocols, has been improved with fixes that affect terminal emulation (SCO ANSI), SFTP filename auto-completion and the user interface (GUI).

Please see below for more details.

*** WHAT’S NEW IN SECURECRT 5.1.2 ***

Bug fixes:

- Line drawing did not work correctly for SCO ANSI emulation.
- When the default session was edited and a tab other than the first tab was active, the “Apply change to all sessions?” prompt was displayed even if no changes were made.
- Under certain circumstances, the color change sequence for 256-color Xterm emulation was split between buffers, which caused some colors to be displayed incorrectly.
- SSH2: SecureCRT could crash when using the TAB key to complete a filename in an SFTP tab, especially if TAB was pressed multiple times.

*** RELEVANT LINKS ***

VanDyke Homepage
Download SecureCRT 5.1.2 (.exe – 8.91MB)
SecureCRT Product Page
General What’s New page for VanDyke products

Vandyke SecureCRT 5.1.1 (Build 269) Released for Download

Tuesday, April 25th, 2006

SecureCRT 5.1 ScreenshotA minor update has been released for Vandyke SecureCRT 5.1, the highly acclaimed security and remote administration suite. SecureCRT 5.1.1, which includes GUI and command line tools for connecting to servers via SSH (v1 and v2), Telnet, Rlogin and other communication protocols, has been further improved with new features and a few bugfixes.

Please see below for more details.

*** WHAT’S NEW IN SECURECRT 5.1.1 ***

Changes:

- For new installations, the default local directory for SFTP tabs
is now “My Documents”. The SFTP local directory can be set
through a session INI-file only option called “Sftp Tab Local
Directory”.

Bug fixes:

- There were problems with line drawing characters and menu
positions when running dellmgr.
- On 64-bit systems, pressing “8″ brought SecureCRT to the
foreground.
- In some cases, when the SecureCRT window was maximized, the
arrow control was placed in the tab bar even though it was
not necessary.
- SSH2: Under certain circumstances, SecureCRT crashed when
attempting to start an X client using SSH2 X11 forwarding.
- SSH2: The trailing slash was no longer being appended during
local file completion. This was a change in behavior from 5.0.
- SSH2: It was not possible to change the passphrase of a public
key through the Public Key Properties dialog.
- SSH2: When initiating an SSH2 password change from the Password
Properties dialog and multiple authentications were selected,
misleading errors were displayed.

*** RELEVANT LINKS ***

VanDyke Homepage
Download SecureCRT 5.1.1 (.exe – 8.91MB)
SecureCRT Product Page
General What’s New page for VanDyke products

Stats by WP SlimStat