Microsoft Security Bulletin MS06-033 - Vulnerability in ASP.NET Could Allow Information Disclosure (917283)

This vulnerability in ASP.NET 2.0 web applications allows an attacker to access by bypass ASP.NET security and request files from application folders if the attacker knows the specific name of the file.  If successful this would like provide the attacker with sensitive information about the application’s inner workings which the attacker to could leverage in further attacks on the application.  Application folders are named “App_*”.   The mitigating factors and viable workarounds published in this bulletin will allow most of you to defer installation of this update until you can fully test it with your applications.

Get this valuable commentary each month as soon as Microsoft releases security updates!

Free log parser scripts, a clear explanation of Microsoft's latest security bulletin, helpful security tips, how-to's and more.