I wrote: > One of the README files on their site (I read it earlier today and > didn't note the URL) says that a patched 3.2.1 version will be made > available shortly. They are not leaving you out in the cold. You just > need to wait a couple of days before resuming your practice of ssh'ing > in to untrusted sites. That URL was: http://www.vandyke.com/products/securecrt/security07-25-02.html It's been revised since the quoted message -- it now shows availability of SecureCRT 3.2.2, fixing this hole for holders of the oldest class of SecureCRT license key. >Bela<