6.4

CVE-2005-1664

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Asp.Net Version1.0
Microsoft ≫ Asp.Net Version1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 18.85% 0.969
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=111513127704270&w=2
http://marc.info/?l=bugtraq&m=111532887612517&w=2
http://scottonwriting.net/sowblog/posts/3747.aspx
http://secunia.com/advisories/15241
Vendor Advisory
http://www.osvdb.org/16196
https://exchange.xforce.ibmcloud.com/vulnerabilities/20409