New Reported Vulnerability with ASP.NET

Question

New Reported Vulnerability with ASP.NET

K. Brian Kelley

SSC Guru

Points: 114642
More actions
October 8, 2004 at 7:18 am

#86634

If you haven't heard about this (it's been out a couple of days but the security bulletins are starting to fly) and your organization develops ASP.NET applications, you may want to pass this on to your developers and security folks:
What You Should Know About a Reported Vulnerability in Microsoft ASP.NET
Programmatically check for canonicalization issues with ASP.NET
K. Brian Kelley
@kbriankelley
October 11, 2004 at 8:00 am

This was removed by the editor as SPAM

Viewing 3 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic. Login to reply

K. Brian Kelley SSC Guru Points: 114642 More actions · Answer 1

SQL Server 2000 Reporting Services does use ASP.NET. There may be an issue with the hotfix and Reporting Services (I encountered one). You can find a workaround here:

http://odetocode.com/Blogs/scott/

I had to add the </CodeGroup> closing tag to what was provided and then run IISReset after making the changes.

K. Brian Kelley
@kbriankelley