Windows 7 Forums


Windows 7: Microsoft Confirms Attacks Targeting Critical ASP.NET Vulnerability

21 Sep 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
Microsoft Confirms Attacks Targeting Critical ASP.NET Vulnerability

Quote:

Microsoft warns that active attacks are exploiting a recently disclosed vulnerability in all versions of .NET Framework, which affects the majority of ASP.NET applications.

"We've just updated Microsoft Security Advisory 2416728 as we've begun to see limited attacks with the ASP.NET vulnerability.

"We have added questions and answers and encourage customers to review this information and evaluate it for their environment," the Redmond giant announced via its Microsoft Security Response Center (MSRC) blog.

The vulnerability and attack methods, known as "oracle padding," have been demonstrated last Friday at the ekoparty Security Conference in Argentina by security researchers Juliano Rizzo and Thai Duong.



Microsoft has provided an workaround via its security advisory, which involves configuring ASP.NET applications to serve the same custom page for all types of errors.
More -
Microsoft Confirms Attacks Targeting Critical ASP.NET Vulnerability - Softpedia
My System SpecsSystem Spec

23 Sep 2010   #2

Windows 7 Home Premium 64 bit. SP-1
Northern Ohio
 
 

Thank you for the heads up JMH. For me waiting for the security KB always works better for me.
My System SpecsSystem Spec
Reply

 Microsoft Confirms Attacks Targeting Critical ASP.NET Vulnerability problems?



Thread Tools



Similar help and support threads for: Microsoft Confirms Attacks Targeting Critical ASP.NET Vulnerability
Thread Forum
MSFT Confirms'Targeted attacks' against old unpatched IE vulnerability Browsers & Mail
Microsoft Confirms x64 Windows 7 Aero Vulnerability News
Microsoft confirms 0-Day IIS security vulnerability System Security
Microsoft Confirms Attacks Targeting Critical 0-Day Office Excel Vulnerability Microsoft Office
Free Microsoft Security Tool Kills Worm Targeting Critical Windows Flaw System Security


All times are GMT -5. The time now is 01:28 PM.


Seven Forums Android App Seven Forums IOS App Follow us on Facebook

Windows 7 Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32