Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure

Sponsored Content

Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure - Post 302455457 by Linux Bot on Tuesday 21st of September 2010 04:15:02 PM

09-21-2010

Registered User

Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -

Revision Note: V1.1 (September 20, 2010): Revised Executive Summary to communicate that Microsoft is aware of limited, active attacks. Also added additional entries to the Frequently Asked Questions section and additional clarification to the workaround. Advisory Summary:Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read data from files on the target server, such as web.config. This would allow the attacker to tamper with the contents of the data. By sending back the altered contents to an affected server, the attacker could observe the error codes returned by the server. Microsoft is aware of limited, active attacks at this time.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

LEARN ABOUT MOJAVE

http::cookies::microsoft

HTTP::Cookies::Microsoft(3)				User Contributed Perl Documentation			       HTTP::Cookies::Microsoft(3)

NAME

       HTTP::Cookies::Microsoft - access to Microsoft cookies files

SYNOPSIS

	use LWP;
	use HTTP::Cookies::Microsoft;
	use Win32::TieRegistry(Delimiter => "/");
	my $cookies_dir = $Registry->
	     {"CUser/Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders/Cookies"};

	$cookie_jar = HTTP::Cookies::Microsoft->new(
			  file	   => "$cookies_dir\index.dat",
			  'delayload' => 1,
		      );
	my $browser = LWP::UserAgent->new;
	$browser->cookie_jar( $cookie_jar );

DESCRIPTION

       This is a subclass of "HTTP::Cookies" which loads Microsoft Internet Explorer 5.x and 6.x for Windows (MSIE) cookie files.

       See the documentation for HTTP::Cookies.

METHODS

       The following methods are provided:

       $cookie_jar = HTTP::Cookies::Microsoft->new;
	   The constructor takes hash style parameters. In addition to the regular HTTP::Cookies parameters, HTTP::Cookies::Microsoft recognizes
	   the following:

	     delayload:       delay loading of cookie data until a request
			      is actually made. This results in faster
			      runtime unless you use most of the cookies
			      since only the domain's cookie data
			      is loaded on demand.

CAVEATS

       Please note that the code DOESN'T support saving to the MSIE cookie file format.

AUTHOR

       Johnny Lee <typo_pl@hotmail.com>

COPYRIGHT

       Copyright 2002 Johnny Lee

       This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

perl v5.18.2							    2012-02-15					       HTTP::Cookies::Microsoft(3)