Cybersecurity Articles & Information Harry Waldron - Computer Security News MS11-100 - Special Microsoft ASP.net security release December 2011Cybersecurity Articles & Information
MS11-100 - Special Microsoft ASP.net security release December 2011
A special out-of-band security release was performed yesterday to address ASP.net vulnerabilities recently discovered. Corporate users should especially test and install this security patch expediently.
MS11-100 - Special Microsoft ASP.net security release December 2011
http://technet.microsoft.com/en-us/security/bulletin/ms11-100
http://blogs.technet.com/b/msrc/archive/2011/12/29/microsoft-releases-ms11-100-for-security-advisory-2659883.aspx
http://blogs.technet.com/b/srd/archive/2011/12/29/asp-net-security-update-is-live.aspx
http://isc.sans.edu/diary.html?storyid=12295
QUOTE: The security update has a severity rating of Critical and resolves a publicly disclosed remote unauthenticated Denial of Service issue in ASP.NET versions 1.1 and above on all supported versions of .NET Framework. Of note, the new method of hash collision attacks used to exploit this vulnerability is an industry-wide issue affecting various Web platforms, including ASP.NET.
While we have seen no attacks attempting to exploit this vulnerability, we encourage affected customers to test and deploy the update as soon as possible. Consumers are not vulnerable unless they are running a Web server from their computer. More technical details can be found at the Security Research & Defense Blog.