vBSEO Security Bulletin - vBSEO 3.3.2 Released

i did not back up the original 2 files that were overwritten so now I can't revert it. Help!

Did you upload the correct patch version?

You are on 3.3.1. you need this patch:
http://www.vbseo.com/attachments/f24...-3-1_patch.zip

make sure you upload with over-write via ftp in ascii mode (not binary)

Well the one that was indicated in my email ... I am looking at it now... it was 3.2.0 crap!

Can you tell me where the right one is? Can I just upload that and will everything resolve?

Whew! Was that ever scary! Seems to be back to normal... Thanks for the quick advice and now I will cancel the support ticket i fired off.

Use the one I linked above. It is correct for 3.3.1.

The email had the wrong link on it. Sorry for the confusion on that :(

Thanks for the update.

Downloaded and upgraded to 3.3.2 without any issues.

Originally Posted by spj8082

for some reason IE8 has issue with vb when it comes to downloading files or attachments.I was trying to find the site that was talking about it with MS..This is an issue that MS wont fix, plus it effects all forum software too from what i was told.I tell my members to use firefox..i think safari and opera works fine too.

Nonsense. I use IE8 and I don't have difficulty downloading vB or vBSEO or anything else.

Originally Posted by eJM

I've never had trouble with IE8 and any vB software. IE8 is my preferred browser. I use FF only for checking and validating my code work and for logging into my client's accounts on websites I also have an account on.

Yes, It's the same for me.

Originally Posted by eJM

This is an isolated problem. I have downloaded lots of vB related software with IE8 and Firefox 3.0.14 without any problems. I have been using WinRAR for several years without issue. I have several file browsers/managers, from Windows Explorer, to Directory Opus 9 to a couple of FTP clients and an image editing and management program. All of them have been used before with no problems.

Earlier today I managed to download with IE8 and unpack the package without problem. This was after I had a problem downloading the package for a client using FF. Now I can't get the package because it appears to be corrupted somehow. I realize the package has not been a problem for others - including me earlier today. But it has been a problem throughout the day and continues to be a problem now.

This seems to have been a vBSEO site issue. At first, the upgrade and patch wasn't even listed as an available download. Later, it was there but the vBSEO site kept disconnecting me (terminating the connection) before the download completed. I just kept retrying until it completed successfully.

Once I had the ZIP file, the upgrade was dead simple and flawless.

Originally Posted by djbaxter

Nonsense. I use IE8 and I don't have difficulty downloading vB or vBSEO or anything else.



Yes, It's the same for me.



This seems to have been a vBSEO site issue. At first, the upgrade and patch wasn't even listed as an available download. Later, it was there but the vBSEO site kept disconnecting me (terminating the connection) before the download completed. I just kept retrying until it completed successfully.

Once I had the ZIP file, the upgrade was dead simple and flawless.

did i say i had issue ?, i don't think i posted it anywhere...i was referring to other members on my site. and it is an issue with MS the script with IE 8 why dont you think they constanly updating it...and sending that crap update to my machine...

Originally Posted by djbaxter

This seems to have been a vBSEO site issue. At first, the upgrade and patch wasn't even listed as an available download. Later, it was there but the vBSEO site kept disconnecting me (terminating the connection) before the download completed. I just kept retrying until it completed successfully.

Once I had the ZIP file, the upgrade was dead simple and flawless.

As patches are not regular packages we are storing them on a different place to our regular products in order to avoid any misunderstandings.

I tried downloading both patches and packages on 3 different PCs and didn't face an issue like that. Other members downloaded the package and they didn't face a similar issue. The issue may be caused by the anti virus script you are using.

Originally Posted by spj8082

did i say i had issue ?, i don't think i posted it anywhere...i was referring to other members on my site. and it is an issue with MS the script with IE 8 why dont you think they constanly updating it...and sending that crap update to my machine...

Absolute hogwash. Show me your so-called "source" for this claim.

Originally Posted by Mert Gökçeimam

As patches are not regular packages we are storing them on a different place then regular products in order to avoid any misunderstandings.

I tried downloading both patches and packages on 3 different pc and never faced a similar issue like that. Also other members downloaded the package and they didn't face a similar issue. The issue maybe caused by the anti virus script you are using.

It was the package I was downloading, not the patch. I've never had that problem before downloading files here. I assumed it was caused by the volume of traffic given that this was an important security update.

In any case, I wasn't posting to complain. It took 4 or 5 tries but eventually downloaded and installed just fine. My purpose in posting was to counter the ridiculous claim that IE8 had a problem downloading vB.

I think this is a hoax. I have not seen any information on the details of this security problem is. I currently have 3 licenses, one is up to date on its renewals, one I don't use and the last is v3.0.0 on a forum I am trying to sell. The only way I can fix the v3.0.0 is buy buying an upgrade for it. The least your company could do is provide a patch for it or a a free upgrade to the oldest version. I don't understand why I should have to upgrade when I can't even find out what the security risk is.

Originally Posted by offline

I think this is a hoax. I have not seen any information on the details of this security problem is. I currently have 3 licenses, one is up to date on its renewals, one I don't use and the last is v3.0.0 on a forum I am trying to sell. The only way I can fix the v3.0.0 is buy buying an upgrade for it. The least your company could do is provide a patch for it or a a free upgrade to the oldest version. I don't understand why I should have to upgrade when I can't even find out what the security risk is.

Uh... okay.

Here's a suggestion: Don't upgrade. Just keep running the unpatched version. Then come back when you've been hacked and tell us what you think.

vBSEO knows what the vulnerabilities are. So do potential hackers. Where do you think that path leads?

Originally Posted by offline

I think this is a hoax. I have not seen any information on the details of this security problem is. I currently have 3 licenses, one is up to date on its renewals, one I don't use and the last is v3.0.0 on a forum I am trying to sell. The only way I can fix the v3.0.0 is buy buying an upgrade for it. The least your company could do is provide a patch for it or a a free upgrade to the oldest version. I don't understand why I should have to upgrade when I can't even find out what the security risk is.

This is not a hoax, nor is it a publicity stunt to gain renewal fees. It is a valid security breach.

Information has not been published because we found and patched the hole before anyone had a chance to exploit it and publish it.

Likewise, we are not going to publish anything about the breach either to protect customers (like yourself) who haven't upgraded or patched yet.

We have provided 3 patches for older versions, even for expired licenses, that have not met end of life.
3.3.1
3.3.0
and
3.2


vBSEO v 3.1 was announced end of life cycle over a year ago.
Eventually, 3.2 will follow suit (likely with the 3.5 release).

Just like windows 3.1/NT4/95/98/me/2000, you will not get any more updates for it, even if it a hole exists. Xp is soon to follow end of life too. It is normal software lifecycle.

Likewise, vBSEO 3.1 and older are no longer supported. You may continue to run them if you wish, but we advise you upgrade to keep your forum, data, and server secure.

since 3.1, over 100 bug fixes have been implemented. 3.2 fixed or upgraded about 100 issues alone vBSEO 3.2.0 Gold Released! . 3.3.0, 3.3.1, and 3.3.2 all had a handful each, plus some new features. Your site will perform much better on the latest release.

Originally Posted by djbaxter

Absolute hogwash. Show me your so-called "source" for this claim.



It was the package I was downloading, not the patch. I've never had that problem before downloading files here. I assumed it was caused by the volume of traffic given that this was an important security update.

In any case, I wasn't posting to complain. It took 4 or 5 tries but eventually downloaded and installed just fine. My purpose in posting was to counter the ridiculous claim that IE8 had a problem downloading vB.

i did my homework ! do yours, IE sucks anyway the only browser that i know is bloated..

Guys, please stop fighting over ie8. This is not the place.

Thanks.