ASP.NET web.config changes needed - large security implications

General Web Coding Microsoft Development
1

http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx

Everyone with asp.net pages needs to check this out, no fix for it yet from MS. The workaround however is pretty easy.

2

FYI,

The patch is now available

http://weblogs.asp.net/scottgu/archive/2010/09/28/asp-net-security-update-now-available.aspx

I assume our servers will be patched very soon right?

3

Thanks for the update, we will indeed have to roll this out, probably work on it over the weekend here, I will post as such tomorrow.

4

This maintenance is posted now.