MS Sec Notification mailing list archives

Microsoft Security Advisory Notification


From: "Microsoft" <securitynotifications () e-mail microsoft com>
Date: Sat, 25 Sep 2010 02:40:45 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


********************************************************************
Title: Microsoft Security Advisory Notification
Issued: September 24, 2010
********************************************************************

Security Advisory Updated Today
==============================================

 * Microsoft Security Advisory (2416728)
  - Title: Vulnerability in ASP.NET Could Allow
    Information Disclosure
  - http://www.microsoft.com/technet/security/advisory/2416728.mspx
  - Revision Note: V1.2 (September 24, 2010): Added an entry to
    the FAQ to announce a revision to the workaround, "Enable a
    UrlScan or Request Filtering rule, enable ASP.NET custom
    errors, and map all error codes to the same error page."
    Customers who have already applied the workaround should
    reapply all listed steps.    


Other Information
=================

Follow us on Twitter for the latest information and updates:
http://twitter.com/msftsecresponse 

Recognize and avoid fraudulent e-mail to Microsoft customers:
=============================================================
If you receive an e-mail message that claims to be distributing
a Microsoft security update, it is a hoax that may contain
malware or pointers to malicious Web sites. Microsoft does
not distribute security updates via e-mail.

The Microsoft Security Response Center (MSRC) uses PGP to digitally
sign all security notifications. However, it is not required to read
security notifications, security bulletins, security advisories, or
install security updates. You can obtain the MSRC public PGP key at
https://www.microsoft.com/technet/security/bulletin/pgp.mspx.

To receive automatic notifications whenever Microsoft Security 
Bulletins and Microsoft Security Advisories are issued or revised,
subscribe to Microsoft Technical Security Notifications on
http://www.microsoft.com/technet/security/bulletin/notify.mspx.


********************************************************************
THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT
DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING
THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT,
INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY
FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING
LIMITATION MAY NOT APPLY.
********************************************************************

To cancel your subscription to this newsletter, reply to this 
message with the word UNSUBSCRIBE in the Subject line.  

To set your contact preferences for this and other Microsoft 
communications, see the communications preferences section of the 
Microsoft Privacy Statement at:
<http://go.microsoft.com/fwlink/?LinkId=92781>.

For the complete Microsoft Online Privacy Statement, see:
<http://go.microsoft.com/fwlink/?LinkId=81184>.

For legal Information, see:
<http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by:
Microsoft Corporation
1 Microsoft Way
Redmond, Washington, USA
98052

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.9.0 (Build 397)
Charset: utf-8
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=SFoa
-----END PGP SIGNATURE-----


Current thread: