CVE-2005-1665

Microsoft ASP.NET 1.x - Denial of Service via __VIEWSTATE Markup

Title source: llm
STIX 2.1

Description

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.

References (5)

Core 5
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111513127704270&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/20408
Vendor Advisory x_refsource_misc
http://scottonwriting.net/sowblog/posts/3747.aspx
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/16195
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15241

Scores

EPSS 0.4033
EPSS Percentile 98.5%

Details

Status published
Products (2)
microsoft/asp.net 1.0
microsoft/asp.net 1.1
Published May 18, 2005
Tracked Since Feb 18, 2026