|
Microsoft .NET Framework URL Path Validation Canonicalization Vulnerability
|
|
Secunia Advisory:
|
SA12749
|
|
|
Release Date:
|
2004-10-08
|
|
Last Update:
|
2005-11-21
|
|
Popularity:
|
16,794 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | ASP.NET 1.x
Microsoft .NET Framework 1.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 2 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Solution:
Apply patches.
Microsoft .NET Framework 1.0 (requires SP3) for Windows 2000 SP3/SP4, Windows XP SP1/SP2, and Windows Server 2003:
http://www.microsoft.com/downloads/de...=4E6D56E5-3D8D-423B-99A1-41EDF23D65BC
Microsoft .NET Framework 1.0 (requires SP3) for Windows XP Tablet PC Edition and Windows XP Media Center Edition:
http://www.microsoft.com/downloads/de...=EE611D27-52CF-43DB-BB97-21318C7FAA70
Microsoft .NET Framework 1.0 (requires SP2) for Windows 2000 SP3/SP4, Windows XP SP1/SP2, and Windows Server 2003:
http://www.microsoft.com/downloads/de...=3271ACD5-EE3C-4BDF-AE28-56D2DF77151E
Microsoft .NET Framework 1.0 (requires SP2) for Windows XP Tablet PC Edition and Windows XP Media Center Edition:
http://www.microsoft.com/downloads/de...=33D4D33E-473F-4842-A3A8-C8266AEE8FAB
Microsoft .NET Framework 1.1 (requires SP1) for Windows 2000 SP3/SP4, Windows XP SP1/SP2, Windows XP Tablet PC Edition, or Windows XP Media Center Edition:
http://www.microsoft.com/downloads/de...=8EC6FB8A-29EB-49CF-9DBC-1A0DC2273FF9
Microsoft .NET Framework 1.1 (requires SP1) for Windows Server 2003:
http://www.microsoft.com/downloads/de...=9BBD5617-49AE-40BF-B0FA-F9049349C6F5
Microsoft .NET Framework 1.1 for Windows 2000 SP3/SP4, Windows XP SP1/SP2, Windows XP Tablet PC Edition, or Windows XP Media Center Edition:
http://www.microsoft.com/downloads/de...=C5E19719-000F-456A-BEAB-5BD7949F8AA2
Microsoft .NET Framework 1.1 for Windows Server 2003:
http://www.microsoft.com/downloads/de...=E54BE8BE-22AF-4390-86E1-25D76794D5C7
Windows XP Embedded SP1:
http://www.microsoft.com/downloads/de...=88c24367-4f1c-4728-900b-bbcb2b10bf45
Provided and/or discovered by:
Toby Beaumont
Changelog:
2005-02-08: Vendor issues security bulletin and patches.
2005-02-09: Added link to US-CERT vulnerability note.
2005-11-21: Added patch information for Windows XP Embedded.
Original Advisory:
MS05-004 (KB887219):
http://www.microsoft.com/technet/security/bulletin/ms05-004.mspx
Other References:
US-CERT VU#283646:
http://www.kb.cert.org/vuls/id/283646
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
27th Nov, 2009
|
New advisories:
|
8 |
|
New vulnerabilities:
|
15 |
|
Updated advisories:
|
11 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
26th Nov, 2009
|
New advisories:
|
15 |
|
New vulnerabilities:
|
37 |
|
Updated advisories:
|
48 |
|
|
|
|
|
|
|
 Solutions | More...
|
|
