Out of Band Release to Address Microsoft Security Advisory 2416728

[A Guy]

Today we provided advance notification to customers that we will release an out-of-band security update to address the vulnerability discussed in Security Advisory 2416728. The update is scheduled for release tomorrow, Tuesday, September 28, 2010 at approximately 10:00 AM PDT. The bulletin has a severity rating of Important and addresses a publicly disclosed vulnerability in ASP.NET that affects all versions of the .NET Framework when used on Windows Server operating systems. Windows desktop systems are listed as affected, but consumers are not vulnerable unless they are running a Web server from their computer.

Out of Band Release to Address Microsoft Security Advisory 2416728 - The Microsoft Security Response Center (MSRC) - Site Home - TechNet Blogs

A Guy

 

[NICK ADSL UK]

MS Out-of-Band Security Bulletin Summary for september 28, 2010
Microsoft Security Bulletin Summary for september 2010
Published: september 28, 2010
Note: There may be latency issues due to replication, if the page does not display keep refreshing
Note: »Security Center - Bulletins Advisories Tools Guidance Resources and »Microsoft Security | Computer Security | Malicious Software are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never sends security or other updates as attachments. These updates must be downloaded from the microsoft.com download center or Windows Update. See the individual bulletins for details.
Because some malicious messages attempt to masquerade as official Microsoft security notices, it is recommended that you physically type the URLs into your web browser and not click on the hyperlinks provided.
Today Microsoft released the following Security Bulletin(s).

Bulletin Summary:
Security Bulletin Search Products Technologies KB Articles Service Packs
Important (1)
Microsoft Security Bulletin MS10-070 - Important
Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
Published: September 28, 2010
Microsoft Security Bulletin MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)


The security update is fully tested and ready for release, but will be made available initially only on the Microsoft Download Center. This enables us to get the update out as quickly as possible, allowing administrators with enterprise installations, or end users who want to install this security update manually, the ability to test and update their systems immediately. We strongly encourage these customers to visit the Download Center, download the update, test it in their environment and deploy it as soon as possible.
Microsoft Download Center

 

[Win7User512]

Glad they quickly have a patch for this. Top priority for them as it effects all ASP.NET apps.