ASP.NET web.config changes needed - large security implications

[Stephen]

http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx

Everyone with asp.net pages needs to check this out, no fix for it yet from MS. The workaround however is pretty easy.

 

[liming]

FYI,

The patch is now available

http://weblogs.asp.net/scottgu/archive/2010/09/28/asp-net-security-update-now-available.aspx

I assume our servers will be patched very soon right?

 

[Stephen]

Thanks for the update, we will indeed have to roll this out, probably work on it over the weekend here, I will post as such tomorrow.

 

[Stephen]

This maintenance is posted now.