|
loftboy
Forum Regular
|
|
 Posted: Sat Oct 09, 2004 10:11 pm |
|
 |
 |
|
|
Microsoft Probes Flaw in ASP.NET
By Simone Kaplan
October 8, 2004
Updated: A glitch in the platform's processing of URLs could allow intruders to access password-protected sections of a Web site simply by altering a URL.
Microsoft Corp. is investigating a reported security flaw in its ASP.NET technology that could allow intruders to access password-protected sections of a Web site simply by altering a URL.
The hole involves a glitch in ASP.NET's processing of URLs, a process known as canonicalization. According to an advisory posted Tuesday on Microsoft's Web site, "an attacker can send specially crafted requests to the server and view secured content without providing the proper credentials."
|
|
|
|
loftboy
Forum Regular
|
|
| Posted: Tue Oct 12, 2004 8:35 pm |
|
|
|
|
|
Opinion: Is the ASP.Net Bug a Big Deal? MS Thinks So
You might have to wait six months or more to get your "highly critical" browser bugs patched
|
|
|
