


               Release Notes for
          PGPvpn Version 7.1.1 HotFix
 (c) 2002 Networks Associates Technology, Inc.
              All Rights Reserved


===============================================

HotFix Release:   November 4, 2002

This HotFix was developed and tested with:

PGPvpn:7.1.1

This product is available on its own, or as
part of PGP Corporate Desktop 7.1.1.

Make sure you have installed one of these
products before using this HotFix.

===============================================


Thank you for using PGPvpn software. This file
contains important information regarding this
release. We strongly recommend that you read
the entire document.

The attached files are provided as is, and with
no warranty either expressed or implied as to
their suitability for any particular use or
purpose. Network Associates, Inc. assumes no
liability for damages incurred either directly
or indirectly as a result of the use of these
files, including but not limited to the loss or
damage of data or systems, loss of business or
revenue, or incidental damages arising from
their use. HotFix files should be applied only
on the advice of McAfee Technical Support, and
only when you are actually experiencing the
issue being addressed by the HotFix. HotFix
files should not be proactively applied in
order to prevent potential product issues. You
are responsible for reading and following all
instructions for preparation, configuration,
and installation of HotFix files. HotFix files
are not a substitute nor replacement for
product Service Packs which may be released by
Network Associates, Inc. It is a violation of
your software license agreement to distribute
or share these files with any other person or
entity without written permission from Network
Associates, Inc. Further, posting of McAfee
HotFix files to publicly available Internet
sites is prohibited. Network Associates, Inc.
reserves the right to refuse distribution of
HotFix files to any company or person guilty of
unlawful distribution of McAfee software
products. Questions or issues with McAfee
HotFix files should be directed to McAfee
Technical Support.


_______________________________________________
WHAT'S IN THIS FILE

-  About This HotFix
   -  Purpose
   -  Resolved Issues
   -  Files Included with This HotFix
-  Installation
   -  Installation Requirements
   -  Installation Steps
   -  Testing Your Installation
-  Contacting McAfee and Network Associates
-  Copyright and Trademark Attributions
   -  Trademarks
   -  License Agreement


_______________________________________________
ABOUT THIS HOTFIX


PURPOSE

This HotFix replaces one of your PGPvpn driver
files. The file it replaces depends on the
operating system you use. The new file resolves
all of the outstanding issues listed in
"Resolved Issues."

RESOLVED ISSUES

1. ISSUE:
   IPsec lets systems authenticate the IPsec
   traffic that they receive. It does this by
   providing a checksum in every IPsec packet.
   Recipients can validate packets by comparing
   this checksum to an Integrity Check Value
   (ICV) that they calculate. If the two match,
   then the packet is valid.

   PGPvpn does not calculate ICVs properly for
   small packets. An attacker could
   theoretically take advantage of this
   vulnerability by creating a custom packet
   that would crash PGPvpn. This would
   constitute a denial of service (DoS)
   attack.

   RESOLUTION:
   This HotFix fixes the issue by replacing a
   key PGPvpn driver file with a newer version.
   The newer version lets PGPvpn calculate ICVs
   properly. The HotFix replaces different
   files, depending on your operating system.

   If you use the following systems, PGPvpn
   replaces PGPpm.sys:

   -  Windows NT
   -  Windows 2000

   If you use the following systems, PGPvpn
   replaces PGPpm.vxd:

   -  Windows 98 SE
   -  Windows ME

FILES INCLUDED WITH THIS HOTFIX

This HotFix consists of a package called
PGPHotfix_ipsec_20021104.ZIP, which contains
the following files:

   PGPHOTFIX.EXE =
      The HotFix setup file.
   PGPHOTFIX.EXE.SIG =
      A PGP signature file for verifying the
      integrity of the HotFix.
   README.TXT =
      This text file.


_______________________________________________
INSTALLATION

INSTALLATION REQUIREMENTS

To use this HotFix, you must have PGPvpn 7.1.1
software installed on the computer you intend
to update with this HotFix.

   NOTE:
   This HotFix does not work with earlier
   versions of PGPvpn software.


INSTALLATION STEPS

1. Extract the files from the HotFix zip file
   into a folder.

2. Run the program PGPhotfix.exe.

   This will replace either your existing
   PGPpm.sys file or PGPpm.vxd file with a new
   version.

3. Restart the computer.

TESTING YOUR INSTALLATION

You can verify that the HotFix updated your
system properly by checking the version
information of the replaced files.

To test your installation on a Windows 98 SE or
Windows ME system:

1. Find the PGPpm.vxd file that the HotFix
   replaced.

   You can find the file in your Windows system
   directory. (This is usually
   C:\windows\system.)

2. Right-click the file and choose "Properties"
   from the shortcut menu.

3. Click the Version tab.

   On Windows 98 SE systems you should see the
   following information:

   File Version:     7.1.2

   On Windows ME systems you should see the
   following information (in the "Other version
   information" list):

   File Version Description:     7.1.2


To test your installation on a Windows NT or
Windows 2000 system:

1. Find the PGPpm.sys file that the HotFix
   replaced.

   You can find the file in the drivers folder
   of your Windows system directory. (This is
   usually C:\winnt\system32\drivers.)

2. Right-click the file and choose "Properties"
   from the shortcut menu.

3. Click the Version tab.

   You should see the following information:

   File Version:     7.1.2 or 7.1.2.0
   Product Version:  7.1.2
   Build Number:     115


_______________________________________________
CONTACTING MCAFEE AND NETWORK ASSOCIATES

Technical Support
      http://knowledge.nai.com


McAfee Beta Program
   Beta Web Site
      www.mcafeeb2b.com/beta/

   E-mail
      avbeta@nai.com


AVERT Anti-Virus Emergency Response Team
      www.mcafeeb2b.com/naicommon/avert/default.asp


Download Site
      www.mcafeeb2b.com/naicommon/download/

   DAT File Updates
      www.mcafeeb2b.com/naicommon/download/dats/find.asp

      ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

   Product Upgrades
      www.mcafeeb2b.com/naicommon/download/upgrade/login.asp

      Valid grant number required.
      Contact Network Associates Customer
      Service


On-Site Training Information
      www.mcafeeb2b.com/services/mcafee-training/default.asp


Network Associates Customer Service
   US, Canada, and Latin America toll-free:
   Phone:   +1-888-VIRUS NO or +1-888-847-8766
            Monday - Friday, 8 a.m. - 8 p.m.,
            Central Time

   E-mail:  services_corporate_division@nai.com
   Web:     www.nai.com
            www.mcafeeb2b.com

For additional information on contacting
Network Associates and McAfee  including
toll-free numbers for other geographic areas 
see the documentation that accompanied your
original product release.


_______________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

(c) 2002 Networks Associates Technology, Inc.
All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form or by
any means without the written permission of
Networks Associates Technology, Inc., or its
suppliers or affiliate companies. To obtain
this permission, write to the attention of the
Network Associates legal department at: 3965
Freedom Circle, Santa Clara, California 95054,
or call
+1-972-308-9960.


TRADEMARKS

Active Firewall, Active Security, Active
Security (in Katakana), ActiveHelp,
ActiveShield, AntiVirus Anyware and design,
Bomb Shelter, Certified Network Expert,
Clean-Up, CleanUp Wizard, CNX, CNX
Certification Certified Network Expert and
design, Design (stylized N), Disk Minder,
Distributed Sniffer System, Distributed Sniffer
System (in Katakana), Dr Solomons, Dr
Solomons label, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), Event
Orchestrator, EZ SetUp, First Aid, ForceField,
GMT, GroupShield, GroupShield (in Katakana),
Guard Dog, HelpDesk, HomeGuard, Hunter,
LANGuru, LANGuru (in Katakana), M and design,
Magic Solutions, Magic Solutions (in Katakana),
Magic University, MagicSpy, MagicTree, McAfee,
McAfee (in Katakana), McAfee and design,
McAfee.com, MultiMedia Cloaking, Net Tools, Net
Tools (in Katakana), NetCrypto, NetScan,
NetShield, NetStalker, Network Associates,
NetXray, NotesGuard, Nuts & Bolts, Oil Change,
PC Medic, PCNotary, PrimeSupport, Recoverkey,
Recoverkey - International, Registry Wizard,
ReportMagic, Router PM, Safe & Sound,
SalesMagic, SecureCast, Service Level Manager,
ServiceMagic, SmartDesk, Sniffer, Sniffer (in
Hangul), Stalker, SupportMagic, TIS, TMEG,
Total Network Security, Total Network
Visibility, Total Network Visibility (in
Katakana), Total Service Desk, Total Virus
Defense, Trusted Mail, UnInstaller, Virex,
Virus Forum, ViruScan, VirusScan, WebScan,
WebShield, WebShield (in Katakana), WebSniffer,
WebStalker, WebWall, Whos Watching Your
Network, WinGauge, Your E-Business Defender,
ZAC 2000, Zip Manager are registered trademarks
of Network Associates, Inc. and/or its
affiliates in the US and/or other countries.
All other registered and unregistered
trademarks in this document are the sole
property of their respective owners.


LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE
APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO
THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE
GENERAL TERMS AND CONDITIONS FOR THE USE OF THE
LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH
TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE
CONSULT THE SALES AND OTHER RELATED LICENSE
GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU
HAVE RECEIVED SEPARATELY AS PART OF THE
PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT
CD, OR A FILE AVAILABLE ON THE WEB SITE FROM
WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH
IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE.
IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO
NETWORK ASSOCIATES, INC. OR THE PLACE OF
PURCHASE FOR A FULL REFUND.


