How severe is CVE-2007-0042?

The severity of CVE-2007-0042 has not been assessed with CVSS v3.

CVE-2007-0042: Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive | Zerodai Security

Descrição

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."

Análise IADesenvolvido por IA

Produtos Afetados

microsoftwindows_2000

-

microsoftwindows_2003_server

-

microsoftwindows_vista

-

microsoftwindows_xp

-

microsoft.net_framework

1.0

microsoft.net_framework

1.1

microsoft.net_framework

2.0

Exploits Disponíveis (1)

EDB-30281

remotewindowsVERIFIED

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

CVE-2007-0042

Paul Craig7/6/2007

Descrição

Análise IADesenvolvido por IA

Produtos Afetados

Exploits Disponíveis (1)

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

Referências