CVE-2005-1664 The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState infor...
MediumCVSS 6.4
EPSS 18.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft asp.net | = 1.0 | No fix listed |
| Microsoft asp.net | = 1.1 | No fix listed |
References
- 20050503 ASP.NET __VIEWSTATE crypto validation prone to replay attacks mailing-list
- 20050505 Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks mailing-list
- scottonwriting.net
- 15241 third-party-advisory vendor-advisory
- 16196 vdb-entry
- ms-aspnet-viewstate-replay(20409) vdb-entry