Friday, October 08, 2004

Microsoft released -- ASP.NET ValidatePath Module

Microsoft has released an ASP.NET HTTP module that Web site administrators can apply to their Web server. This module will protect all ASP.NET applications against all potential canonicalization problems known to Microsoft.

Microsoft updated the security site with the updated new information and guidance related to the reported ASP.NET security vulnerability.

*** All customers with any ASP.NET deployments, on any operating systems should follow the guidance provided.

To ease the thing; Microsoft released a new HTTP Module mitigation best practice.

This is in the form of an MSI installer that will help protect all ASP.NET applications on a Web server. This MSI installer will place a binary into the GAC and update the machine.config file for ASP.NET.

Download information at

You can find the detailed guidance about the HTTP Module, how the MSI works, and how to deploy it etc in this KB Article:

For more info about ASP.NET Security vulnerability; check my blog below!!!

2 comments:

Umesh Thota said...

GOOD NEWS :)

Anonymous said...

Thats a News- Krishna