Microsoft .NET Framework ASP.NET '__VIEWSTATE' Replay Security Bypass Vulnerability

Bugtraq ID:	49637
Class:	Design Error
CVE:	CVE-2005-1664
Remote:	Yes
Local:	No
Published:	May 04 2005 12:00AM
Updated:	May 04 2005 12:00AM
Credit:	Michal Zalewski
Vulnerable:	Microsoft .NET Framework 1.1 SP3 Microsoft .NET Framework 1.1 SP2 Microsoft .NET Framework 1.1 SP1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.0 SP3 Microsoft .NET Framework 1.0 SP2 Microsoft .NET Framework 1.0 SP1 Microsoft .NET Framework 1.0
Not Vulnerable:

Microsoft .NET Framework ASP.NET '__VIEWSTATE' Replay Security Bypass Vulnerability

Microsoft .NET Framework is prone to a security-bypass vulnerability in ASP.NET that affects the 'ViewState' functionality.

Successfully exploiting this issue will allow an attacker to reuse '__VIEWSTATE' data through replay attacks. This may lead to other attacks.

Microsoft .NET Framework ASP.NET '__VIEWSTATE' Replay Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Microsoft .NET Framework ASP.NET '__VIEWSTATE' Replay Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft .NET Framework ASP.NET '__VIEWSTATE' Replay Security Bypass Vulnerability

References:

• .NET Framework Homepage (Microsoft)
  
• ASP.NET __VIEWSTATE crypto validation prone to replay attacks (Michal Zalewski)
  
• Microsoft Homepage (Microsoft)