----------------------------------------------------------- New Message on BDOTNET
----------------------------------------------------------- From: ashish4All Message 1 in Discussion Hi friends, Do you know... a big security issue have come up in ASP.net. "Reports have indicated that an attacker could send specially crafted requests to a Web server running ASP.NET applications and bypass forms based authentication or Windows authorization configurations, and potentially view secured content without providing the proper credentials." check this out... http://www.microsoft.com/security/incident/aspnet.mspx to avoid for the time, Microsft recommends to install the Microsoft ASP.NET ValidatePath module (VPModule.msi) or take suggestions for the same from http://support.microsoft.com/kb/887459 ("How to programmatically test for canonicalization issues with ASP.NET") Kind regards, Ashish ----------------------------------------------------------- To stop getting this e-mail, or change how often it arrives, go to your E-mail Settings. http://groups.msn.com/bdotnet/_emailsettings.msnw Need help? If you've forgotten your password, please go to Passport Member Services. http://groups.msn.com/_passportredir.msnw?ppmprop=help For other questions or feedback, go to our Contact Us page. http://groups.msn.com/contact If you do not want to receive future e-mail from this MSN group, or if you received this message by mistake, please click the "Remove" link below. On the pre-addressed e-mail message that opens, simply click "Send". Your e-mail address will be deleted from this group's mailing list. mailto:[EMAIL PROTECTED]
