MS10-070

MS-10-070 CVE-2010-3332 Vulnerabilidad de Padding Oracle en Microsoft ASP.NET...

SUSE: Security Advisory (SUSE-SU-2012:0393-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft ASP.NET PKCS Padding Information Disclosure (MS10-070; CVE-2010-3332)

An information disclosure vulnerability has been reported in ASP.NET. This vulnerability is caused by ASP.NET providing web clients details in error messages when decrypting certain ciphertext. Successful exploitation of this vulnerability could allow the attacker to read and tamper with data. If...

MS10-070 ASP.NET Padding Oracle File Download

MS10-070 ASP.NET Padding Oracle信息泄露漏洞 1.漏洞描述。 ASP.NET由于加密填充验证过程中处理错误不当，导致存在一个信息泄漏漏洞。成功利用此漏洞的攻击者可以读取服务器加密的数据，例如视图状态。 此漏洞还可以用于数据篡改，如果成功利用，可用于解密和篡改服务器加密的数据。 虽然攻击者无法利用此漏洞来执行恶意攻击代码或直接提升他们的用户权限，但此漏洞可用于信息搜集，这些信息可用于进一步攻击受影响的系统。 也就是说虽然不能直接getshell，但是理论上可以读取任意文件，包括数据库配置文件。 2.漏洞标识符： CVE： CVE-2010-3332 3.受影响...

CVE-2010-3332

Microsoft ASP.NET components in the .NET Framework (versions 1.1 SP1, 2.0 SP1/SP2, 3.5, 3.5.1, and 4.0) are vulnerable to a padding oracle attack because the system provides detailed error codes during decryption attempts. This flaw allows remote attackers to decrypt and modify encrypted View Sta...