3 matches found
CVE-2012-3543
mono 2.10.x ASP.NET Web Form Hash collision DoS...
SuSE 10 Security Update : Mono (ZYPP Patch Number 8001)
The FORMS authentication methods of mono ASP.net implementation were vulnerable to a padding oracle attack as described in CVE-2010-3332, as they did encryption after checksum. This update changes the method to checksum after encryption to avoid this attack. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2005-0509
Multiple cross-site scripting XSS vulnerabilities in the Mono 1.0.5 implementation of ASP.NET .Net allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including "" and ""...