**ACTION REQUIRED** Latest ASP.NET Vulnerability (Advisory #2416728) Affects SharePoint 2010

You might have heard by now about the latest security advisory for ASP.NET (#2416728) that many folks are talking about. It involves the being able to request and download files via the web.config file. Scott Guthrie’s blog post as well as the advisory discuss how to address the issue.

This issue also affects SharePoint because it is an ASP.NET application. Microsoft has recently blogged that it affects SharePoint and the workaround should be applied ASAP on every single SharePoint WFE server. Check the SharePoint team blog post for details.

» TechNet: Security Advisory 2416728
» Scott Guthrie: Important: ASP.NET Security Vulnerability
» SharePoint Team Blog: Security Advisory 2416728 (Vulnerability in ASP.NET) and SharePoint

Technorati Tags: sharepoint,sharepoint 2010,2416728

posted on Monday, September 20, 2010 9:59 PM

Feedback

# re: **ACTION REQUIRED** Latest ASP.NET Vulnerability (Advisory #2416728) Affects SharePoint 2010 9/24/2010 12:07 PM Nicole

Hi Andrew,
Any idea if this would affect our MCMS 2002 installation?
Thanks,
Nicole

Post Feedback

Title:
Name:
Email:	(email will not be displayed)
Url:
Comments:
Please add 3 and 5 and type the answer here: Remember Me?

All Comments Are Filtered & Moderated
Unfortunately comment spammers are just too effecient and are constantly dirtying up blogs with irrelevant and unwanted comments trying to improve their standing on search engines. All comments on this blog are moderated. I do not censor comments, but I don't approve comments with vulger language or those soliciting products. Most of the time comments are approved within a few hours of being submitted with the only exception when I'm traveling.

Why are you asking for my email address?
The only reason I'm asking for your email address, which isn't required to submit a comment, is to provide a gravatar if you've created an account for yourself and associated your email address with a small image. If you have a gravatar created for the email address you submit, it will appear next to your comment. Otherwise nothing will appear.

What is a gravatar?
A gravatar is a "globally recognized avatar." You can get more information about gravatars, as well as create your own for free, at www.gravatar.com. You can also view my gravatar here.

This work is licensed under a Creative Commons License