Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS) - Microsoft

Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -
# 1  
Old 09-18-2010
Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -
Revision Note: V1.0 (September 17, 2010): Advisory published. Advisory Summary:Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read data from files on the target server, such as web.config. This would allow the attacker to tamper with the contents of the data. By sending back the altered contents to an affected server, the attacker could observe the error codes returned by the server. We are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

bundle::apache::asp::extra

Bundle::Apache::ASP::Extra(3pm) 			User Contributed Perl Documentation			   Bundle::Apache::ASP::Extra(3pm)

NAME

	 Bundle::Apache::ASP::Extra - Install modules that provide additional functionality to Apache::ASP

SYNOPSIS

	perl -MCPAN -e 'install Bundle::Apache::ASP::Extra'

CONTENTS

       Bundle::Apache::ASP  - Base for Apache::ASP installation

       CGI	   - Required for file upload, make test, and command line ./cgi/asp script

       HTML::Parser	 - Required for HTML::FillInForm

       HTML::Clean	- Compress text/html with Clean config or $Response->{Clean} set to 1-9

       Net::SMTP   - Runtime errors can be mailed to the webmaster with MailErrorTo config

       Devel::Symdump	- Used for StatINC setting, which reloads modules dynamically

       Apache::DBI	- Cache database connections per process

       Compress::Zlib	 - Gzip compress HTML output on the fly

       Time::HiRes	 - Sub second timing of execution with Debug 3 or -3 enabled

       HTML::FillInForm  - FormFill functionality which autofills HTML forms from form data

       Apache::Filter	 - Required for SSI filtering with Apache::SSI

       HTML::SimpleParse - Required for SSI filtering with Apache::SSI

       Apache::SSI	 - Required for full server side includes support ( SSI ) beyond file includes

       Tie::TextDir	 - Fast file based cache for CacheDB, good for caching large values for things like XSLT and $Response->Include() caching

       Bundle::XML	 - Required for XML::XSLT support.

       XML::XSLT	 - Required for XSLT support.  May also use XML::Sablotron and XML::LibXSLT for this, which are not part of this bundle.

DESCRIPTION

       This bundle contains extra modules used by Apache::ASP.

AUTHOR

       Joshua Chamas

perl v5.14.2							    2011-08-15					   Bundle::Apache::ASP::Extra(3pm)