PUG Community TechDays (IT Pro Track) Jan 2012

Date: Saturday, 21st Jan, 2012

 

Time: 10:00 AM - 02:00 PM

 

Venue

MCCIA ‘s Sumant Moolgaokar Auditorium
(Ground Floor)
MCCIA Trade Tower, A-Wing,
International Conventional Center,
403, Senapati Bapat Road,
Pune, 411 016,
India

ASP.NET security Vulnerability Found

Few hours ago Microsoft released a Microsoft Security Advisory about a security vulnerability in ASP.NET.  This vulnerability exists in all versions of ASP.NET. Microsoft recommend that all customers immediately apply a workaround to prevent attackers from using this vulnerability against your ASP.NET applications.

here are details and a workaround from Scott Guthrie’s Blog as it is…

-----

Important: ASP.NET Security Vulnerability

A few hours ago we released a Microsoft Security Advisory about a security vulnerability in ASP.NET.  This vulnerability exists in all versions of ASP.NET.

This vulnerability was publically disclosed late Friday at a security conference.  We recommend that all customers immediately apply a workaround (described below) to prevent attackers from using this vulnerability against your ASP.NET applications.

What does the vulnerability enable?

An attacker using this vulnerability can request and download files within an ASP.NET Application like the web.config file (which often contains sensitive data).

At attacker exploiting this vulnerability can also decrypt data sent to the client in an encrypted state (like ViewState data within a page).