AUSTIN, Texas {December 18, 2002} -- Pragma Systems Inc. was notified regarding a possible vulnerability with Version 2.0 of Pragma SecureShell. Pragma Systems tested Pragma SecureShell 2.0 and the upcoming new Version 3.0, and found that the attacks did cause a memory access protection fault on Microsoft platforms.
The CERT ® Coordination Center, a center of Internet security expertise, found that multiple vendors' implementations of the secure shell (SSH) transport layer protocol contain vulnerabilities that could allow a remote attacker to execute arbitrary code with the privileges of the SSH process or cause a denial of service. The vulnerabilities affect SSH clients and servers, and they occur before user authentication takes place.
After research, Pragma Systems corrected the problem. The correction of the problem provides that any attack would not cause a Denial of Service, or the ability of random code to run on the server.
The problem is corrected in Pragma SecureShell Version 3.0. Pragma Systems recommends that all customers upgrade to the latest version of Pragma SecureShell 3.0 to avoid any of these vulnerability issues. Any customers with concerns regarding this vulnerability report should contact Pragma Systems, Inc at support@pragmasys.com for information on obtaining an upgrade free of charge. Pragma's web site is located at www.pragmasys.com and the company can be reached at 1-512-219-7270.
About Pragma Systems,
Inc.
Pragma Systems Inc. is a leading provider of enterprise class Windows servers for Microsoft platforms. Pragma’s market leading telnet server for Windows has over six hundred thousand licensed nodes in 62 countries. The product won PC Week Analyst’s choice and NSTL best Windows telnet server awards. Pragma SecureShell product offers highly encrypted secure remote access solution based on SSH protocols. Pragma TerrminalServer product offers connecting VT/WYSE/IBM/ASCII terminals to Windows servers. Pragma Systems, Inc. is a privately held company founded in 1990 and is located in Austin, Texas.
For more information contact Pragma Systems, Inc, 3700 W. Parmer Lane, Suite 100, Austin, TX. 78727, or call (512) 219-7270; fax (512 )219-7110; email: pragma@pragmasys.com; www.pragmasys.com
###