Microsoft Security Bulletin MS06-056 - Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)

Details are sketchy on this bulleting apparently to keep exploit details from getting out.  The vulnerability is an information disclosure risk in the .NET Framework 2.0 which may be installed on Windows 2000, XP or 2003.  The title indicates the vulnerability is limited ASP.NET but the body of the bulleting refers to the entire framework.  When I have more information from Microsoft I’ll pass it along via my blog.  Since information is so limited on this one I have a hard time making a recommendation.  Microsoft rates it as only moderate and lack of proof of concept code sway me to a more wait and see approach…

Get this valuable commentary each month as soon as Microsoft releases security updates!

Free log parser scripts, a clear explanation of Microsoft's latest security bulletin, helpful security tips, how-to's and more.