ASP.NET __VIEWSTATE function replay attack
Published:		03.05.2005
Source:		BUGTRAQ
SecurityVulns ID:		4756
Type:		library
Level:		5/10
Description:		Data is stored signed on client side, but host name and timestamp are not part of signed data.

Affected:

MICROSOFT : .NET Framework 1.1

Original document

Michal Zalewski, ASP.NET __VIEWSTATE crypto validation prone to replay attacks (03.05.2005)

Discuss:

Read or add your comments to this news (0 comments)