Thursday, September 30, 2004

More research on the ASP.NET Vulnerability

See this post for an update

This seems to be fixed in .NET 1.1 SP1

i could reproduce the vulnerability on V1.1.4322573 (which is plain 1.1) - but i couldn't reproduce it on V1.1.4322.2032 (which is 1.1 SP1)

so - patch those machines!

 


Work in Progress
Thursday, September 30, 2004 1:43:39 PM UTC  #