Description
Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26802
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-033
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/27153
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1016465
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20999
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A419
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2751
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/18920
Scores
EPSS
0.3716
EPSS Percentile
98.4%
Details
Status
published
Products (1)
microsoft/.net_framework
2.0
Published
Jul 11, 2006
Tracked Since
Feb 18, 2026