Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

BID:11342

Info

Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

Bugtraq ID: 11342
Class: Input Validation Error
CVE: CVE-2004-0847
Remote: Yes
Local: No
Published: Oct 06 2004 12:00AM
Updated: Oct 10 2007 11:48PM
Credit: The vendor reported this vulnerability.
Vulnerable: Microsoft ASP.NET 1.1
Microsoft ASP.NET 1.0
Microsoft ASP.NET 0
Microsoft .NET Framework 1.1 SP1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.0 SP3
Microsoft .NET Framework 1.0 SP2
Microsoft .NET Framework 1.0 SP1
Microsoft .NET Framework 1.0
Not Vulnerable:

Discussion

Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

Microsoft ASP.NET is reported prone to a remote information-disclosure vulnerability because the application fails to properly secure documents when handling malformed URI requests.

An attacker may leverage this issue to bypass authentication required to access files in secured directories.

Exploit / POC

Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

No exploit is required to leverage this issue. The following proof of concept has been provided:

Mozilla Web Browser based proof of concept:
http://www.example.com/secureDirectory\somefile.aspx

Microsoft Internet Explorer based proof of concept:
http://www.example.com/secureDirectory%5Csomefile.aspx

Solution / Fix

Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

Solution:
Microsoft has released updates to address this vulnerability.

Microsoft has updated their original advisory to indicate that a revised fix is available for .NET Framework on Windows XP Tablet Edition and Media Center Edition. At the time of this writing, the fix was not available from the download link provided in the bulletin.


Microsoft .NET Framework 1.0 SP3

Microsoft .NET Framework 1.0 SP2

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 SP1

References

Microsoft ASP.NET URI Canonicalization Unauthorized Web Access Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report