vBSEO Security Bulletin - vBSEO 3.3.2 Released

**Juan Muriente** · 10-27-2009 06:41 AM

October 27, 2009

A potentially serious security vulnerability has necessitated the release of vBSEO 3.3.2. All customers are urged to upgrade immediately to vBSEO 3.3.2. This hole effects all versions prior to 3.3.2. If left un-patched, your system could become compromised.

3.3.2 also contains a few minor bug fixes that have been reported since the 3.3.1 release.

Download 3.3.2 Now
https://www.vbseo.com/downloads/

Patching Older Versions
If you are not prepared to upgrade to 3.3.2 at this time, patching your current version is available. Please download the file that correlates to your installed version and follow the instructions below:

Patch for vBSEO 3.3.2: vBulletin SEO Forums
Patch for vBSEO 3.3.1: vBulletin SEO Forums
Patch for vBSEO 3.3.0: vBulletin SEO Forums
Patch for vBSEO 3.2: vBulletin SEO Forums

vBSEO versions 3.1 and older have met End Of Life and will not be patched in this or future updates. If you are on a version older than vBSEO 3.2, you should upgrade to at least vBSEO 3.2 (latest, 3.3.2 recommended).

Installing the Patch:
Advanced users:

FTP the files, overwriting current installation files.

Step by Step:

Download the correct version for your board's vBSEO version from the link above
Extract the archive with an un-zip tool
Upload entire contents of the folder to your vBulletin installation folder, allowing for overwrite within your FTP client to replace current files.

There is no upgrade script, product to install, .htaccess file changes, or config file changes needed to be made with this patch.

Need Help?
If you have any questions about upgrading or patching your install, please create a support ticket: vBSEO.com Helpdesk. Our staff are standing by to help should you run into a problem.

Your security is our top priority,
The vBSEO Team

**eJM** · 10-27-2009 01:24 PM

Am I the only one have trouble with the 3.3.2 download? The file is unrecognized or the wrong format according to my computer.

Jim

**Brian Cummiskey** · 10-27-2009 01:37 PM

I just tested the download again. Working fine here.

When does it give you this error? on download? on unzip?

**ruhrpottforum** · 10-27-2009 02:08 PM

Download for 3.3.2 full worked fine - but after upgrading I got problems with license key. After several minutes it worked again ... strange things.

**Michael Biddle** · 10-27-2009 02:14 PM

When you upgrade to a new version your key changes. Just resave the new red key, and on the reload, it will turn green.

**spj8082** · 10-27-2009 02:15 PM

upgrade went smooth.

**eJM** · 10-27-2009 02:15 PM

When using IE8, it gives an error during the download. I tried again and didn't get the error and it appears to have downloaded the whole package and I was able to unpack it. I have not installed the upgrade on my own forum yet though.

When downloading the package for one of my customer's, I use Firefox and it does download. But when I try to unpack it, I get this error:

Originally Posted by WinRAR Diagnostic messages:

[path to package]: The archive is either in unknown format or damaged

Jim

**spj8082** · 10-27-2009 02:22 PM

Originally Posted by eJM

When using IE8, it gives an error during the download. I tried again and didn't get the error and it appears to have downloaded the whole package and I was able to unpack it. I have not installed the upgrade on my own forum yet though.

When downloading the package for one of my customer's, I use Firefox and it does download. But when I try to unpack it, I get this error:

Jim

for some reason IE8 has issue with vb when it comes to downloading files or attachments.I was trying to find the site that was talking about it with MS..This is an issue that MS wont fix, plus it effects all forum software too from what i was told.I tell my members to use firefox..i think safari and opera works fine too.

**webwizzy** · 10-27-2009 02:27 PM

Originally Posted by eJM

When using IE8, it gives an error during the download. I tried again and didn't get the error and it appears to have downloaded the whole package and I was able to unpack it. I have not installed the upgrade on my own forum yet though.

When downloading the package for one of my customer's, I use Firefox and it does download. But when I try to unpack it, I get this error:

Jim

Try using the default Windows unzipping feature, instead of Winrar.

**hydn** · 10-27-2009 02:31 PM

What's the difference between the patch and the version upgrade as far as file changes?

I notice only two files changed in the patch download.

Thanks

**Chroder** · 10-27-2009 02:31 PM

How "potentially serious" is this? Can we have some details?

My server admin has dropped off the face of the planet, and apparently the credentials have changed. I need to know if I have to disable vBSEO until I can get access.

**Mert Gökçeimam** · 10-27-2009 02:36 PM

Originally Posted by hydn

What's the difference between the patch and the version upgrade as far as file changes?

I notice only two files changed in the patch download.

Thanks

3.3.2 also includes fixes for bugs that were discovered within vBSEO 3.3.1. Please remember that vBSEO version updates always include bug fixes that are discovered in older versions. That's why we always suggest our users run the latest vBSEO versions.

**hydn** · 10-27-2009 02:37 PM

Originally Posted by Mert Gökçeimam

3.3.2 also includes bugs that has been discovered within vBSEO 3.3.1 . Please remember that vBSEO version updates always include bug fixes that are discovered in older versions. Thats why we always suggest our users running latest vBSEO versions.

Thanks, whats the link to the change log?

**mmorpgitalia** · 10-27-2009 02:38 PM

october 27, 2010

hihihihihihi!! Lol!

**Mert Gökçeimam** · 10-27-2009 02:41 PM

Originally Posted by hydn

Thanks, whats the link to the change log?

As this is a security update we'll not supply a detailed change log within this release.

Originally Posted by mmorpgitalia

hihihihihihi!! Lol!

Thanks for the notice , corrected

vBSEO Security Bulletin - vBSEO 3.3.2 Released

vBSEO Security Bulletin - vBSEO 3.3.2 Released

Similar Threads

[How to] Get the most Security for vBSEO

JELSOFT SECURITY BULLETIN - vBulletin 3.6.8 Patch Level 1 Released

vBulletin 3.6.3 Released - Security Fix for XSS Cross-Site Scripting Flaw