Slashdot Mirror

← Back to Stories (view on slashdot.org)

Microsoft Issues Ominous ASP.Net Security Warning

Posted by michael on from the you've-got-hack dept.

An anonymous reader writes "A security flaw in Microsoft's ASP.NET apparently allows access to password-protected areas just by altering a URL. There's no patch yet, but in the meantime Microsoft is telling ASP.NET developers they can rewrite their applications to prevent exploits. About 2.9 million web sites run on ASP.NET according to Netcraft." Some more links: another Microsoft article, NTBugtraq, K-Otik and Heise.

6 of 554 comments (clear)

  1. Let the tedious flamebait/trolling begin by Scowler · · Score: 0, Flamebait

    Or, better yet, go read yesterday's post about Mozilla security holes. Then you can flame, bash, and troll MS while at least feeling a little guilty about it.

  2. Accepting Responsibility by unix+guy · · Score: 1, Flamebait

    I'm beginning to believe that it's time CIOs were taken to task for repeatedly putting their businesses in danger by continuing to require Microsoft products on their servers.

    Most /. readers will agree that the OS and most of the MS software is buggy and CERTAINLY less than secure, so shouldn't these corporate "EXPERTS" know it as well? If so then they are intentionally endangering their most precious corporate assets - information.

    Where I come from that is a direct affront to the charter of their positions and grounds for termination...

    --
    "Straddling the sword of technology..."
  3. Re:Same old, same old. by dook43 · · Score: 0, Flamebait

    Also, after denying permissions to an aspx.page http://server/directory\deniedpage.aspx didn't work either. Odds are you have no idea what you are talking about.

    --
    This comment was randomly generated by a school of piranhas chewing on the PCB of a Microsoft Natural Keyboard.
  4. What a coinky-dink.. by otis+wildflower · · Score: 0, Flamebait

    .. Ars Technica just migrated to .NET...

    (ok, maybe coinky-dink is the wrong compound-word.. Irony's not quite right either.. How about BWAHAHAHAH!?)

  5. you have no right by redluv · · Score: 0, Flamebait

    if you are not an ASP.NET developer, please do not comment on this story. it does not concern you.

  6. Re:'Just a patch' is something of a misnomer by js3 · · Score: 0, Flamebait

    you know if software development is too frustrating for you, you can give a shot at flipping burgers at mcdonalds. You sound like an engineer who whines about having to do fixing and testing. Isn't that part of your job description?

    --
    did you forget to take your meds?