SharePoint and ASP.NET Vulnerability – Security Update Available

 

Note that this is not just limited to SharePoint. It impacts anything running ASP.NET except for 1.1 SP3.

 

UPDATE!

Out of Band Release to Address Microsoft Security Advisory 2416728

http://blogs.msdn.com/b/sharepoint/archive/2010/09/28/out-of-band-release-to-address-microsoft-security-advisory-2416728.aspx

 

This security update is rated Important for all supported editions of ASP.NET except Microsoft .NET Framework 1.0 Service Pack 3.

See here for versions and details: http://www.microsoft.com/technet/security/bulletin/MS10-070.mspx

 

 

SharePoint developers and server administrators need to follow up on this Microsoft Security Advisory.

Read this ASAP!

http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx

and this:

http://blogs.msdn.com/b/sharepoint/archive/2010/09/21/security-advisory-2416728-vulnerability-in-asp-net-and-sharepoint.aspx

 

“This vulnerability affects Microsoft SharePoint 2010 and Microsoft SharePoint Foundation 2010.  The vulnerability is in ASP.NET. We recommend that all SharePoint 2010 customers apply the workaround as soon as possible”

.