Intrusion PreventionMS.ASP.Net.Forms.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Microsoft ASP.Net.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application allowing an attacker to escalate their privileges to the security context of the user they are targeting. As a result, an attacker may be able to execute arbitrary code within the security context of the targeted user.
Affected Products
Microsoft .NET Framework 1.1 Service Pack 1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.5 Service Pack 1
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.0
Impact
Security Bypass: Remote attackers can bypass security checking of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
http://technet.microsoft.com/en-us/security/bulletin/ms11-100
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 30717 |
| Created | Jan 12, 2012 |
| Updated | Mar 04, 2022 |
| Risk |
|
| CVE ID | CVE-2011-3416 |
| Exploit Prediction Score | 96.42% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | ASP_app |