Gaping Security Hole a Pain in the ASP 10/7/2004 - 1,967 views,
|
Previous Article « Make Your C*ck a Hammer (Spamusement Cartoon)
Read Next Article » Vote for Whomever You Want - But Don’t Take This Poll!
| ORDER YOUR POPCORN TODAY AND HELP US MAKE OUR GOAL! |
A gaping hole has just been discovered in Microsoft’s ASP.NET product, which allows access to password protected areas of a website just be altering the URL for access.
According to an article published by Netcraft today, the issue involves “a bug in ASP.NET’s handling of URLs, known as “canonicalization.” If a visitor to an ASP.NET site substitutes ” or ‘%5C’ for the ‘/’ character in the URL, they may be able to bypass password login screens. The technique may also work if a space is subsituted for the slash”
While there is no fix available yet, Microsoft is offering guidance on how to deal with the issue here.
You can read more about this here.
Previous Article « Make Your C*ck a Hammer (Spamusement Cartoon)
Read Next Article » Vote for Whomever You Want - But Don’t Take This Poll!
|
|
Email the link for this page to a friend! |
Read more:
» Windows XP Home Edition Default File Sharing a Big Security Hole
» Security Hole in Microsoft Excel
» Microsoft WMF Patch for Windows Metafile (WMF) Issue Released Early - Get It Now!
» Security Hole in Word Allows Attack Through Email with Ginwui.a Trojan
For additional similar stories check out our archives on Everything Else
