Authentication flaw

Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...

CVE-2006-1300

The CVE-2006-1300 entry corresponds to the .NET Framework 2.0 ASP.NET Information Disclosure vulnerability in ASP.NET that allows bypassing access restrictions to Application Folder objects by name via URL paths. Affected software includes .NET Framework 2.0 on Windows 2000 SP4, XP SP1/SP2, and W...

Microsoft ASP.NET Application Folder Information Disclosure Vulnerability

Description ASP.NET is prone to an information-disclosure vulnerability. This issue is due to a failure in the applications to properly validate user-supplied input. An attacker can exploit this issue to retrieve potentially sensitive information. Information retrieved may aid in further attacks...

ASP.NET source code disclosure

It's possible to retrieve source codes for scripts and executable, except protected file extensions...

MS06-033: Vulnerabilities in ASP.NET could allow information disclosure (917283)

The remote host is running a version of the ASP.NET framework that contains a flaw that could allow an attacker to bypass the security of an ASP.NET website by accessing protected objects by their explicit names. Tenable Network Security, Inc. include"compat.inc"; if description scriptid22027;...

Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure (917283)

Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure 917283 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximum Severi...

SYMSA-2006-005

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-005 Advisory Title: Lanap CAPTCHA bypass exposure Author : Michael White, [email protected] and Graham Murphy, [email protected]...

BotDetect ASP.NET CAPTCHA security protection bypass

It's possible to bypass protection by using replay attacks...

Sql injection

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

CVE-2006-2042

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

CVE-2006-2042

CVE-2006-2042 affects Adobe Dreamweaver 8 before 8.0.2 and Dreamweaver MX 2004. The vulnerability arises from code generated by Dreamweaver that does not properly validate input, enabling SQL Injection in the ColdFusion, PHP MySQL, ASP, ASP.NET, and JSP server models. The impact can include remot...

CVE-2006-2042

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

CVE-2006-1364

Microsoft w3wp aka w3wp.exe does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service resource consumption or crash by repeatedly requesting each of several documents that refer to COM...

w3wp-dos.txt

--0-1633069887-1142992701=:20251 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sorry, if you are receiving multiple copies of it. Just resending as the one that I sent last night has not yet appeared. w3wp remote DoS due to improper reference of STA COM components i...

ASP.NET w3wp - COM Components Remote Crash

ASP.NET w3wp - COM Components Remote Crash // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include include include include char pszUnauthLinksDWORD; define portno 80 int mainint argc, CHAR argv char szWorkBuff100; DWORD dwCount = 0, dwCounter; int iCnt = 0,...

[NT] w3wp DoS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ASP.NET invalid components usage DoS

w2wp process can crash or exhaust resources on .Net applications written without “AspCompat” directive...

ASP.NET w3wp (COM Components) Remote Crash Exploit

Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...

w3wp remote DoS due to improper reference of STA COM components in ASP.NET

Often developers forget to use the “AspCompat” directive which is required while referencing COM components in ASP.NET. Missing AspCompat directive causes general instability and poor performance of the web application, just a simple increase of load on a web server may cause it to crash. After...

ASP.NET w3wp (COM Components) Remote Crash Exploit

No description provided by source. // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include winsock2.h include windows.h include stdlib.h include stdio.h include string.h include stdio.h include ctype.h char pszUnauthLinksDWORD; define portno 80 int mainint argc, CHAR argv char...