http://www.vijaytapanchal.com/day-issue/
Microsoft Fixes ASP.NET Zero-Day Flaw
by Tony Bradley, Yahoo News
Microsoft released Security Bulletin MS10-070 out-of-band today–a couple weeks ahead of the regularly scheduled Patch Tuesday for October. The update resolves a zero-day issue with ASP.NET that could allow an attacker to compromise information on all supported versions of Windows.
The details from the Microsoft security bulletin describe the zero-day vunerability. “An information disclosure vulnerability exists in ASP.NET due to improper error handling during encryption padding verification. An attacker who successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. This vulnerability can also be used for data tampering, which, if successfully exploited, could be used to decrypt and tamper with the data encrypted by the server.”
A blog post from Microsoft’s Scott Guthrie provides a detailed explanation of the vulnerability. “To understand how this vulnerability works, you need to know about cryptographic oracles. An oracle in the context of cryptography is a system which provides hints as you ask it questions. In this case, there is a vulnerability in ASP.NET which acts as a padding oracle. This allows an attacker to send cipher text to the web server and learn if it was decrypted properly by examining which error code was returned by the web server. By making many such requests (and watching what errors are returned) the attacker can learn enough to successfully decrypt the rest of the cipher text.”
Andrew Storms, director of security operations for nCircle commented via email to say, “Microsoft delivered today’s zero-day patch release in just eleven days. It’s not the fastest turn-around time in Microsoft patch history, but it’s pretty close to the seven day turnaround we saw in January. We now know that in the January update Microsoft knew about the bug before the exploit, so the seven day quick turnaround is a not entirely accurate measurement. This leaves me wondering if Microsoft already knew about today’s bug. But the bigger question in my mind is the potential effect of this short turn-around on quality.”
Interestingly, the update will not be immediately pushed through Automatic Updates. A blog post from the Microsoft Security Response Center explains, “The update will be made available initially only through the Microsoft Download Center and then released through Windows Update and Windows Server Update Services within the next few days. This allows customers the option to deploy it manually now without delaying for broader distribution.”
nCircle’s Storms notes, “It’s a bit odd that today’s patch release won’t be immediately available on Windows Update. Administrators and consumers will both be required to manually download the patch and install it manually,” but Storms adds, “Since the major risk of this bug is with network administrators running IIS websites, manual downloads are probably a reasonable compromise between convenience and getting the patch out as quickly as possible.”
[Source] Software Outsourcing Blog Section: http://www.techomechina.com
About the Author
Senior Software Developer, working in RayooTech software outsourcing company, website: http://www.techomechina.com
Summoner Showcase — Issue #30 — Every Day A New Adventure
|
|
1988 FDC1149 NZ JOINT ISSUE First Day Cover CDS $0.99 |
|
|
1994 Stadium Club First Day Issue Parallel #60 TINO MARTINEZ MARINERS $2.00 |
|
|
BASEBALL – 1994 STADIUM CLUB 1ST DAY ISSUE – 8 CARDS – 3/3A $25.00 |
|
|
NEW – Soul of a Nation: 30 Days, 30 Issues, 30 Prayers $2.91 |
|
|
Sidney Sheldon signed First Day of Issue Cover FDC $40.00 |
|
|
1999 Stadium Club Baseball First Day Issue #309 BRIAN MEADOWS Marlins 104/200 $2.99 |
|
|
BASEBALL – 1994 STADIUM CLUB 1ST DAY ISSUE – 8 CARDS – 4/4A $15.00 |
|
|
DC Comics The Flash – Brightest Day – First Issue June 2010 In Mint Condition! $9.99 |
|
|
BASEBALL – 1994 STADIUM CLUB 1ST DAY ISSUE – 8 CARDS – 5/5A $15.00 |
|
|
2 HAMILTON COLLECTION CHOKIN NEW YEAR’S DAY PINE & CRANE 2 GOLD PLATES 1ST ISSUE $5.00 |
|
|
1994 AUSTRALIA – THAILAND JOINT ISSUE FRIENDSHIP BRIDGE, FIRST DAY COVER $4.88 |
|
|
SWAROVSKI Magazine back issue 2/2009 ~watch on cover/Lovlots/Mothers Day inside $12.50 |
|
|
2 NOLAN RYAN FIRST DAY OF ISSUE STAMPS IN FOLDERS- 23K GOLD STAMP — 1989 $19.99 |
|
|
Spanish Andorra 1976 Europa Issue First Day Cover $2.61 |
|
|
French Andorra 1972 Europa Issue First Day Cover $12.65 |
|
|
French Andorra 1975 Europa Issue First Day Covers $12.65 |
|
|
French Andorra 1967 Europa Issue First Day Cover $6.32 |
|
|
Spanish Andorra 1978 Europa Issue First Day Cover $2.61 |
|
|
French Andorra 1971 Europa Issue First Day Cover $12.65 |
|
|
French Andorra 1977 Europa Issue First Day Cover $5.14 |
|
|
French Andorra 1973 Europa Issue First Day Cover $15.81 |
|
|
French Andorra 1978 Europa Issue First Day Cover $5.14 |
|
|
Spanish Andorra 1974 Europa Issue First Day Cover $6.32 |
|
|
Indian Head Penny Stamp James B. Longacre Designer First Day Issue Cover 1978 $0.98 |
|
|
QATAR ARAB POST DAY SCARCE MNH SHEET ISSUED IN 2008 $19.99 |
|
|
FDI 1976 $2 Two Dollar First Day 1st Issue Stamped Postmarked New Port Richey FL $7.49 |
|
|
First Day of Issue 6 cent Eagle Airmail 1938 $1.09 |
|
|
First Day of Issue Illinois Sequicentennial and 10th Anniv. of Antarctic Treaty $0.99 |
|
|
Singapore Birds 1994 Herons $2 booklet cto on 1st day of issue. $1.99 |
|
|
15 SEPTEMBER 1992 THE GREEN ISSUE ALL 4 BENHAM SILK FIRST DAY COVERS ALL SHSs $9.47 |
|
|
Singapore 1981 Technical Training set in marginal blocks cto on 1st day of issue $4.99 |
|
|
Singapore 1995 Philatelic Museum set in plate blocks cto on 1st day of issue. $9.99 |
|
|
WIZZARD (ROY WOOD) i wish it could be christmas every day 7″ withdrawn issue gat $14.56 |
|
|
Two STEAMBOATS Colorado “Silk” Cachet First Day of Issue (1989) $4.99 |
|
|
CANADA 1972 SMALL CENT PENNY FIRST DAY ISSUE & FDC PROOF-BU UNC-MINT COIN $1.26 |
|
|
2002 Christmas set of 2 maximum cards with first day of issue cancel $3.95 |
|
|
MARSHALL ISLANDS SPACE SHUTTLE DISCOVERY FIRST DAY OF ISSUE COIN & FDC PROOF-BU $4.14 |
|
|
WOMAN’S DAY Magazine ~ April 1944 Issue $5.00 |
|
|
2002 Champions of the Turf set of 5 maximum cards with first day of issue cancel $10.85 |
|
|
2002 Bush Tucker set of 5 maximum cards with first day of issue cancel $10.85 |
|
|
Handpainted Dyer 1245 First Day of Issue Cover $65.00 |
|
|
Babe Ruth First Day of Issue Cover $0.10 |
|
|
NZ 2002 Vatican joint issue set on NZ Post first day cover $4.93 |
|
|
Brazil American Chaber of Commerce to Us 1949 Cover Sc 692 2nd Day of Issue $5.00 |
|
|
Kastelyok Budapest Hungary First Day Issue Cover Magyar Posta Stamps 1986 $0.88 |
|
|
USA First Day Issue Covers Illustrative Album $19.99 |
|
|
USA Butterflies and Toleware First Day of Issue Covers $9.99 |
|
|
Ashton-Drake “Mother’s Day” 1997 1st Issue $19.99 |
|
|
2002 ational Greetings set of 3 maximum cards with first day of issue cancel $10.85 |
|
|
First Day of Issue 250th Anniversary DETRIOT $0.99 |
|
|
Breville BES900XL Semi Automatic Espresso Machine $1,199.95 Commercial features and performance, in a domestic footprint. Espresso perfection requires precision temperature and pressure control, consistently, every time. At the heart of this machine is its dual stainless steel boiler heating system with electronic PID temperature control. The dedicated espresso boiler is adjustable (190°-205°F) for different bean roasts and origins, while a separate ste… |
|
|
8 Japanese Floral Calendar Chokin Plates by Hamilton $107.00 The Hamilton Collection 6″ plates in Very Good Condition. #1 New Year’s Day, Pine & Crane, Plate #0192IK. #3 Spring Cherry Blossom, Plate #0866WC. #4 Girl’s Doll Day Festival, Peach Blossoms, Plate #7297WC. #5 Buddha’s Birthday, Lotus & Baby Buddha, Plate #2445HC. #8. Summer, Morning Story & Evening Story, Plate #0389HB. #9. Autumn Grasses & sinsins Insects, Plate #5737HB. #10. Festival of the Ful… |
|
|
Aerial image of Dungeness Nuclear Power Station, Dungeness headland, Kent, Photo Mugs Aerial image of Dungeness Nuclear Power Station, Dungeness headland, Kent, England, United Kingdom, Europe…. |
|
|
Born This Way [+Digital Booklet] $7.99 … |
|
|
Nothing But The Best $8.65 All products are BRAND NEW and factory sealed. Fast shipping and 100% Satisfaction Guaranteed…. |
|
|
Homesick $6.98 All products are BRAND NEW and factory sealed. Fast shipping and 100% Satisfaction Guaranteed…. |
|
|
[VHS]Peter Pan(Fully Restored 45th Anniversary Limited Edition) (Walt Disney Masterpiece Collection) [VHS] $5.95 Peter Pan has a special place in the realm of classic animated Disney films: it instills an element of childlike wonder. The 1953 version of James M. Barrie’s story is colorfully told and keeps on the straight and narrow of the book. Barrie’s wondrous focus on child’s play is the key to its longevity: kids who don’t grow up, shadows that run away from their owners, pirates, a fairy, and the magic… |
|
|
On the Air! Passport to the World: Nicaragua (Addressing Critical Issues Teenagers Face Every Day) $35.00 Our TV crew tags along with a youth group as they work together to build a church in Nicaragua. The dense jungles, the active volcano, the work…the fun! Don’t they ever sleep? Then we’re back in Michigan as teens help the “next generation” in their own neighborhood. Join the crew as they visit the electrifying Power Company Kids Club. On this episode you will discover the excitement of leav… |
|
|
Gerbert: Before My First Day Began…: Adoption (Special Issue) $36.95 As Gerbert is adopted too, he is able to share his feelings with an adopted friend who is full of questions…. |
|
|
Gerber 31-000749 Bear Grylls Survival Series Ultimate Multitool with Nylon Sheath $33.94 The product of collaboration between Gerber and survival expert Bear Grylls, the ultimate multi-tool provides 12 stainless steel weather-resistant components. Its rugged construction, spring-loaded pliers, external locking tools, and extra-grippy handle make this tool the ultimate multitasker no outdoor enthusiast should be without. The ultimate multi-tool comes with a nylon sheath.The Ultimate Mu… |
|
|
Complete Idiot`s Guide to American History (Paperback) $12.5 An accessible and comprehensive volume, presented as a collective biography, features coverage of the nation`s most relevant events and contributors, in a latest edition that places an emphasis on how American history explains modern-day issues. Origin… |
|
|
Tales of a Severed Head (Paperback) $11.07 This volume brings Moroccan poet Rachida Madani`s remarkable poems to English-language readers for the first time. In Tales of a Severed Head, Madani addresses present-day issues surrounding the role of women in society?issues not unlike thos… |
|
|
Practical Forensic Psychiatry (Paperback) $42.34 Highly succinct, structured and focused, this book concentrates on the key facts and practical day to day issues vital to forensic psychiatry whether for quick clinical reference or for fact-oriented exam preparation. -clear bullet point style hel… |