CVE-2010-3332

概要

参考情報

• blogs.technet.com/b/srd/archive/2010/09/17/understanding-the-asp-net-vulnerability.aspx · Vendor Advisory
• isc.sans.edu/diary.html · Third Party Advisory
• pentonizer.com/general-programming/aspnet-poet-vulnerability-what-else-can-i-do · Third Party Advisory
• secunia.com/advisories/41409 · Third Party Advisory
• securitytracker.com/id · Third Party Advisory
• threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310 · Third Party Advisory
• twitter.com/thaidn/statuses/24832350146 · Broken Link
• weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx · Mitigation
• dotnetnuke.com/Community/Blogs/tabid/825/EntryId/2799/Oracle-Padding-Vulnerability-in-ASP-NET.aspx · Third Party Advisory
• ekoparty.org/juliano-rizzo-2010.php

.net framework のその他の脆弱性

• CVE-2026-97788高 7.5Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a networ…
• CVE-2026-96960高 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96959高 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96958高 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96222高 7.4Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a n…