Mi è arrivato questo messaggio,ma non mi è chiaro, è arrivato dalla server farm
This is a message sent through MyServers. You can also read this message by logging into your account and going to the message section.
Hi Sergio,
Microsoft has released an important Security Advisory (Microsoft Security Bulletin MS10-070) addressing a security vulnerability in ASP.NET. Details and downloads are available at:
Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure
We are sending this message to all clients, rather than only to clients with Windows operating systems on dedicated servers, to ensure the information reaches as many affected people as possible. This may include clients with collocation services, or Windows servers and desktops in other locations.
What does this vulnerability allow?
This security update resolves a publicly disclosed vulnerability in ASP.NET. The vulnerability could allow information disclosure. An attacker who successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. This vulnerability can also be used for data tampering, which, if successfully exploited, could be used to decrypt and tamper with the data encrypted by the server.
Who is affected?
This security update is rated *Important* for all supported editions of ASP.NET except Microsoft .NET Framework 1.0 Service Pack 3. Microsoft .NET Framework versions prior to Microsoft .NET Framework 3.5 Service Pack 1 are not affected by the file content disclosure portion of this vulnerability.
For more information, see the subsection, Affected and Non-Affected Software, on the following page:
Microsoft Security Bulletin MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
What action should I take?
You should immediately apply the Microsoft security update located at:
Microsoft Security Bulletin MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
Please note, it has been our experience thus far that the update is *not* automatically installed by Windows Update and may need to be initiated manually.
Where can I find further information?
Important: ASP.NET Security Vulnerability - ScottGu's Blog
Understanding the ASP.NET Vulnerability - Security Research & Defense - Site Home - TechNet Blogs
ASP.NET Security Vulnerability – help your customers protect their applications - Hosting Insights - Site Home - TechNet Blogs
If you need any further information, or are unclear on any of the content in this message, please contact us immediately and we will do our best to assist you.
Regards,
The RapidSwitch Team
This is a message sent through MyServers. You can also read this message by logging into your account and going to the message section.
Hi Sergio,
Microsoft has released an important Security Advisory (Microsoft Security Bulletin MS10-070) addressing a security vulnerability in ASP.NET. Details and downloads are available at:
Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure
We are sending this message to all clients, rather than only to clients with Windows operating systems on dedicated servers, to ensure the information reaches as many affected people as possible. This may include clients with collocation services, or Windows servers and desktops in other locations.
What does this vulnerability allow?
This security update resolves a publicly disclosed vulnerability in ASP.NET. The vulnerability could allow information disclosure. An attacker who successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. This vulnerability can also be used for data tampering, which, if successfully exploited, could be used to decrypt and tamper with the data encrypted by the server.
Who is affected?
This security update is rated *Important* for all supported editions of ASP.NET except Microsoft .NET Framework 1.0 Service Pack 3. Microsoft .NET Framework versions prior to Microsoft .NET Framework 3.5 Service Pack 1 are not affected by the file content disclosure portion of this vulnerability.
For more information, see the subsection, Affected and Non-Affected Software, on the following page:
Microsoft Security Bulletin MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
What action should I take?
You should immediately apply the Microsoft security update located at:
Microsoft Security Bulletin MS10-070 - Important: Vulnerability in ASP.NET Could Allow Information Disclosure (2418042)
Please note, it has been our experience thus far that the update is *not* automatically installed by Windows Update and may need to be initiated manually.
Where can I find further information?
Important: ASP.NET Security Vulnerability - ScottGu's Blog
Understanding the ASP.NET Vulnerability - Security Research & Defense - Site Home - TechNet Blogs
ASP.NET Security Vulnerability – help your customers protect their applications - Hosting Insights - Site Home - TechNet Blogs
If you need any further information, or are unclear on any of the content in this message, please contact us immediately and we will do our best to assist you.
Regards,
The RapidSwitch Team
Commenta