Multiplatform View State Tampering

Trustwave's SpiderLabs Security Advisory TWSL2010-001: Multiplatform View State Tampering Vulnerabilities Published: 2010-02-08 Version: 1.1 SpiderLabs has documented view state tampering vulnerabilities in three products from separate vendors. View states are used by some web application...

asp. net virtual host path disclosure issue-vulnerability warning-the black bar safety net

Learn asp. net when found,asp. net the site asp. net code for temporary compilationI so understood,could such an argument not a pairput in the WINDOWS\Microsoft. NET\Framework\v1. 1. 4 3 2 2\Temporary ASP.NET Files if you are using 2. 0 of the frameworks,then it is the WINDOWS\Microsoft...

Mandriva Linux Security Advisory : mono (MDVSA-2009:322)

Multiple vulnerabilities has been found and corrected in mono : IOActive Inc. found a buffer overflow in Mono.Math.BigInteger class in Mono 1.2.5.1 and previous versions, which allows arbitrary code execution by context-dependent attackers CVE-2007-5197. Multiple cross-site scripting XSS...

DNN (DotNetNuke) Detection

The remote web server is running DNN formerly known as DotNetNuke, a web application framework written in ASP.NET. Note that this plugin can attempt to log into the application and obtain version information if supplied with credentials for a user with superuser privileges. C Tenable Network...

Microsoft SharePoint <= 12.0.0.6219 Team Services Information Disclosure Vulnerability (KB976829)

Microsoft SharePoint Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft ASP.NET Resource Paths Canonicalization (MS05-004; CVE-2004-0847)

The .NET framework is a windows framework for building and running software. The framework supports a variety of programming languages. A component of this framework is ASP.NET which allows for the development of dynamic Web applications in different programming languages. A vulnerability exists ...

CVE-2009-3830

The download functionality in Team Services in Microsoft Office SharePoint Server 2007 12.0.0.4518 and 12.0.0.6219 allows remote attackers to read ASP.NET source code via pathnames in the SourceUrl and Source parameters to layouts/download.aspx...

CVE-2009-3830

CVE-2009-3830 affects Microsoft SharePoint Server 2007 Team Services (versions 12.0.0.4518 and 12.0.0.6219). The vulnerability arises in the download functionality (_layouts/download.aspx) where pathnames supplied via SourceUrl/Source allow disclosure of ASP.NET source code. Impact is information...

Microsoft SharePoint团队协作服务下载功能源代码信息泄漏漏洞

Bugraq ID: 36817 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint团队协作服务Team Services的下载功能存在漏洞，可导致泄漏ASP.NET文件源代码。 SharePoint Team Services存储各种文件到它的后端数据库中，这些文件包含站点模板，定制ASP.NET页和用于上传到文档库的应用脚本。...

SharePoint 2007 - Team Services Source Code Disclosure

SharePoint 2007 - Team Services Source Code Disclosure ======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219,...

SharePoint 2007 ASP.NET Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin [email protected] Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others...

SharePoint Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others Risk: Medium Status:...

SharePoint 2007 - Team Services Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others Risk: Medium Status:...

SharePoint 2007 Team Services source code disclosure

No description provided by source. ======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin [email protected] Vendor: Microsoft Systems Affected: SharePoint 2007...

SharePoint 2007 Team Services source code disclosure

Exploit for unknown platform in category web applications ==================================================== SharePoint 2007 Team Services source code disclosure ==================================================== ======= Summary ======= Name: SharePoint Team Services source code disclosure...

CVE-2009-2504

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Proje...

Null pointer dereference

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via 1 a crafted XAML browser application XBAP, 2 a crafted ASP.NET application, or 3 a...

Design/Logic Flaw

Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framewor...

CVE-2009-0091

Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framewor...

Design/Logic Flaw

The Common Language Runtime CLR in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP, 2 a crafted Silverlight application, ...