Design/Logic Flaw

🗓️ 30 Dec 2011 01:55:00Reported by PRIOn knowledge baseType

The CaseInsensitiveHashProvider.getHashCode function in Microsoft .NET Framework ASP.NET subsystem allows remote attackers to cause denial of service by triggering hash collisions

Reporter	Title	Published	Views	Family All 15
Tenable Nessus	MS11-100: ASP.NET Could Allow Denial of Service (2638420) (uncredentialed check)	16 Jan 201200:00	–	nessus
Tenable Nessus	Juniper Junos J-Web Hash Collision DoS (PSN-2012-07-650)	17 Jul 201200:00	–	nessus
Tenable Nessus	MS11-100: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)	29 Dec 201100:00	–	nessus
Check Point Advisories	Microsoft ASP.NET and PHP Hash Collision Denial of Service (CVE-2011-3414)	2 Jan 201200:00	–	checkpoint_advisories
Check Point Advisories	Microsoft ASP.NET and PHP Hash Collision Denial of Service - Specific (CVE-2011-3414)	2 Jan 201200:00	–	checkpoint_advisories
CVE	CVE-2011-3414	30 Dec 201101:00	–	cve
Cvelist	CVE-2011-3414	30 Dec 201101:00	–	cvelist
Microsoft KB	MS11-100: Vulnerability in the .NET Framework could allow elevation of privilege: December 29, 2011	29 Dec 201100:00	–	mskb
NVD	CVE-2011-3414	30 Dec 201101:55	–	nvd
OpenVAS	Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)	30 Dec 201100:00	–	openvas

Source	Link
nruns	www.nruns.com/_downloads/advisory28122011.pdf
ocert	www.ocert.org/advisories/ocert-2011-003.html
kb	www.kb.cert.org/vuls/id/903934
archives	www.archives.neohapsis.com/archives/bugtraq/2011-12/0181.html
us-cert	www.us-cert.gov/cas/techalerts/TA11-347A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14588
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-100

07 Dec 2023 18:38Current

7High risk

Vulners AI Score7

EPSS0.58895