Information Disclosure, Elevation of Privilege Path Validation Vulnerability - CAN-2004-0847 Severity Ratings and Vulnerability Identifiers: The actions that the attacker could take would depend on the specific content being protected. The vulnerability is documented in the Vulnerability Details section of this bulletin.Īn attacker who successfully exploited this vulnerability could gain unauthorized access to parts of a Web site. This update resolves a public vulnerability in ASP.NET that could allow an attacker to bypass the security of an ASP.NET Web site and gain unauthorized access. To determine the support lifecycle for your product and version, visit the following Microsoft Support Lifecycle Web site. Other versions either no longer include security update support or may not be affected. The software in this list has been tested to determine if the versions are affected. NET Framework 1.1 for the following operating system versions: (886904) Windows XP Professional 圆4 Edition or Windows XP Professional 圆4 Edition Service Pack 2.NET Framework 1.1 Service Pack 1 for the following operating system versions: (886903) NET Framework 1.0 Service Pack 2 for the following operating system versions: (887999) NET Framework 1.0 Service Pack 2 for the following operating system versions: (886905) NET Framework 1.0 Service Pack 3 for the following operating system versions: (887998) Windows Server 2003 for Itanium-based Systems, Windows Server 2003 with SP1 for Itanium-based Systems, or Windows Server 2003 with SP2 for Itanium-based Systems.Windows Server 2003 圆4 Edition or Windows Server 2003 圆4 Edition Service Pack 2.Windows Server 2003, Windows Server 2003 Service Pack 1, or Windows Server 2003 Service Pack 2.

Windows XP Service Pack 1 or Windows XP Service Pack 2.

Windows 2000 Service Pack 3 or Windows 2000 Service Pack 4.

NET Framework 1.0 Service Pack 3 for the following operating system versions: (886906) Tested Software and Security Update Download Locations:Īffected Software: Microsoft.

For more information, see Microsoft Knowledge Base Article 887219. The article also documents recommended solutions for these issues. Recommendation: Customers should install the update at the earliest opportunity.Ĭaveats: Microsoft Knowledge Base Article 887219 documents the currently known issues that customers may experience when they install this security update. Impact of Vulnerability: Information Disclosure, possible Elevation of Privilege Who should read this document: Customers who use Microsoft® Windows®. Security Bulletin Microsoft Security Bulletin MS05-004 - Important ASP.NET Path Validation Vulnerability (887219)

.net framework 1.1 for xp