MS.ASP.Net.Forms.Authentication.Bypass

Release Date Jan 12, 2012
Severity high
Impact Security Bypass: Remote attackers can bypass security checking of vulnerable systems.
Description This indicates an attack attempt to exploit an Authentication Bypass vulnerability in Microsoft ASP.Net. The vulnerability is due to insufficient sanitizing of user supplied inputs in the application allowing an attacker to escalate their privileges to the security context of the user they are targeting. As a result, an attacker may be able to execute arbitrary code within the security context of the targeted user.
Affected Products Microsoft .NET Framework 1.1 Service Pack 1 Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.5 Service Pack 1 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0
Recommended Actions Apply the most recent upgrade or patch from the vendor. http://technet.microsoft.com/en-us/security/bulletin/ms11-100
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2011-3416
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS11-100.mspx (MS-ID)

Fortinet