RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
BID:50110
Info
RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
| Bugtraq ID: | 50110 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2011 12:00AM |
| Updated: | Sep 21 2013 12:15AM |
| Credit: | Ashutosh Kapse, Vasant Rao, Terry Morias, Om Moolchandani, and Ryan Morri of Southern Cross Computer Systems Pty Ltd. |
| Vulnerable: |
Microsoft IIS 7.5 Microsoft .NET Framework 4.0 |
| Not Vulnerable: | |
Discussion
RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
Microsoft .NET Framework is prone to a vulnerability that lets attackers bypass intended access restrictions regarding file upload types, which allows attackers to upload arbitrary files to ASP-based web applications.
An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks may also be possible.
Note: This BID is being retired; the issue can not be exploited as described.
Microsoft .NET Framework is prone to a vulnerability that lets attackers bypass intended access restrictions regarding file upload types, which allows attackers to upload arbitrary files to ASP-based web applications.
An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks may also be possible.
Note: This BID is being retired; the issue can not be exploited as described.
Exploit / POC
RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
References
RETIRED: Microsoft .NET Framework 'SaveAs()' Function Security Bypass Vulnerability
References:
References:
- .NET Framework Homepage (Microsoft)