Hello,
As we announced yesterday, today we released Link Removed due to 404 Error out-of-band to address a vulnerability in ASP.NET. The bulletin and the blog by Scott Guthrie, corporate vice president of Microsoft's .NET Developer Platform are available for more information.
This security...
Hi everyone,
Today we released Link Removed due to 404 Error describing a publicly disclosed vulnerability in ASP.NET that affects all versions of the .NET Framework. At this time we are not aware of any attacks using this vulnerability and we encourage customers to review the advisory for...
advisory
asp.net
blog
communication
configuration
customers
defense
dotnet
framework
information disclosure
investigation
mitigation
protection
research
risk
scripting
security
update
vulnerability
workaround
Hi everyone -
We've just updated Link Removed due to 404 Error as we've begun to see limited attacks with the ASP.NET vulnerability. We have added questions and answers and encourage customers to review this information and evaluate it for their environment.
We have also added additional...
advisory
answers
asp.net
attack
blog
community
defense
exploitation
guidance
information
information disclosure
microsoft
questions
risk
security
technical
trustworthy computing
update
vulnerability
Hello -
Today we provided Link Removed due to 404 Error to customers that we will release an out-of-band security update to address the vulnerability discussed in Security Advisory Link Removed due to 404 Error. The update is scheduled for release tomorrow, Tuesday, September 28, 2010 at...
advisory
asp.net
automatic updates
bulletin
customer service
distribution
download center
enterprise
microsoft
net framework
out-of-band
security
testing
threat landscape
trustworthy computing
update
vulnerability
web server
webcast
windows server
Join Link Removed as he stops by Link Removed office to chat about NuPack - the new open source packaging technology for ASP.NET developers. In this interview James gets an exclusive look at the new way to quickly get features added into your web applications. Phil demos and discusses the...
Join Link Removedas he talks to Scott Hunter and Link Removedfrom the ASP.NET team about the new features that are in the new releases of WebMatrix and ASP.NET Web Pages. WebMatrix provides everything you need to easily build, customize and deploy websites from scratch or by using open source...
This week on Web Camps TV, Stephen Walther from the ASP.NET Team joins James Senior (Link Removed) to discuss an exciting announcement: Microsoft is about to make the first contributions to the jQuery open source project!
In the past 6 months, we've been busy working on three features...
This week on Channel 9, Dan is joined by Clint Rutkas to discuss the week's top developer news, including:
Scott Guthrie - ASP.NET Security Update Now available [watch]
Don Box - Update on Link Removed [watch]
MSDN - Link Removed, now supports Windows Phone 7 [watch]
Scott Mitchell -...
Revision Note: V1.2 (September 24, 2010): Added an entry to the FAQ to announce a revision to the workaround, "Enable a UrlScan or Request Filtering rule, enable ASP.NET custom errors, and map all error codes to the same error page." Customers who have already applied the workaround should...
Severity Rating: Important - Revision Note: V1.0 (September 28, 2010): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in ASP.NET. The vulnerability could allow information disclosure. An attacker who successfully exploited this vulnerability could...
Bulletin Severity Rating:Important - This security update resolves a publicly disclosed vulnerability in ASP.NET. The vulnerability could allow information disclosure. An attacker who successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the...
This week on Channel 9, Dan is joined by Clint Rutkas to discuss the week's top developer news, including:
Jason Zander: Walkthrough of using Link Removed (Watch)
Scott Guthrie: ASP.NET Security Vulnerability FAQ, and updated steps to avoid it (Watch)
Jaime Rodriguez, Yochay Kiriaty - Link...
asp.net
channel 9
cheat sheet
comparison algorithm
developer news
hands on lab
link removed
panorama controls
pivot control
silverlight
string formatting
string similarity
tips
training
vulnerability
watch
wcf
windows phone
Revision Note: V1.2 (September 24, 2010): Added an entry to the FAQ to announce a revision to the workaround, "Enable a UrlScan or Request Filtering rule, enable ASP.NET custom errors, and map all error codes to the same error page." Customers who have already applied the workaround should...
active attacks
advisory
asp.net
customerrors
encryption
errorpage
faq
information
information disclosure
microsoft
request filtering
security
security breach
server issues
tampering
urlscan
viewstate
vulnerability
web.config
workaround
Revision Note: V1.1 (September 20, 2010): Revised Executive Summary to communicate that Microsoft is aware of limited, active attacks. Also added additional entries to the Frequently Asked Questions section and additional clarification to the workaround. Advisory Summary:Microsoft is...
Revision Note: V1.0 (September 17, 2010): Advisory published. Advisory Summary:Microsoft is investigating a new public report of a vulnerability in ASP.NET. An attacker who exploited this vulnerability could view data, such as the View State, which was encrypted by the target server, or read...
Welcome to the all new Channel 9. This is the fifth major release of Channel 9 since our original launch back on April 6, 2004.
With this major release we focussed on top requests from you in the forums along telemetry data to guide our design. We've made it easier to find content through...
asp.net
channel 9
code
community
content
development
feedback
infrastructure
jquery
learning
microsoft azure
performance
redesign
release
silverlight
simplicity
support
telemetry
tv shows
Link RemovedThis week on Web Camps TV, Link Removed talks to Link Removed about the new Helpers in WebMatrix.
Link Removed is the free tool from Microsoft that makes it easy to build websites and web applications, then publish them on the internet with just a couple of clicks of the mouse. In...
api
asp.net
development
drupal
free tools
helper
hosting
jim wang
microsoft
php
preview
templates
umbraco
web apps
web camps
web development
webmatrix
wishlist
wordpress
Link RemovedThis week on Channel 9, Dan and Brian discuss the week's top developer news, including:
Rob Miles & Andy Wigley - 12 Part Windows Phone 7 Jump Start series
Jaime Rodriguez - Windows Phone Link Removed
Jeremy Alles - How to build a XAML Trigger to play a sound using...
asp.net
channel 9
coapp
developers
framework
guide
html5
jquery
mvc
open source
package management
patch
powershell
silverlight
sound effects
touch optimization
visual studio
web development
windows phone
xaml
Link RemovedIt's the first episode of Web Camps TV—the show that gets you inside the Microsoft Web Platform!*
In this episode,*Link Removed talks to Link Removed, Senior PM on the ASP.NET MVC team, about*ASP.NET MVC 3 Preview 1. Phil shows off his demo skills as he takes us on a tour of the...
Severity Rating: Critical - Revision Note: V1.0 (August 10, 2010): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Microsoft .NET Framework and Microsoft Silverlight. The vulnerabilities could allow remote code execution on a client system if a...