Questions tagged [ms11-100]
4 questions
196
votes
5 answers
ASP.NET MS11-100: how can I change the limit on the maximum number of posted form values?
Microsoft recently (12-29-2011) released an update to address several serious security vulnerabilities in the .NET Framework. One of the fixes introduced by MS11-100 temporarily mitigates a potential DoS attack involving hash table collisions. It…
colithium
- 10,269
- 5
- 42
- 57
11
votes
1 answer
How was the hash collision issue in ASP.NET fixed (MS11-100)?
As reported by Slashdot, MS issued an update to ASP.NET to fix the hash collision attack today. (Listed as "Collisions in HashTable May Cause DoS Vulnerability - CVE-2011-3414" on the linked Technet page.)
The problem is that the POST data are…
svick
- 236,525
- 50
- 385
- 514
8
votes
2 answers
ASP.NET Web.config Inheritance not working for MaxHttpCollectionKeys setting from MS11-100
After updating our systems with the recently released asp.net vulnerability patch ms11-100, we found that some of our pages started failing with the exception "[HttpException (0x80004005): The URL-encoded form data is not valid.]" This is covered in…
fallenprogrammr
- 189
- 1
- 4
0
votes
1 answer
Microsoft security bulletin MS11-100 breaking our site
Possible Duplicate:
ASP.NET, MS11-100, and POST
After applying the updates from the Microsoft security bulletin MS11-100 certain forms on our site stopped working. The exception says "Operation is not valid due to the current state of the…
user1123615
- 9
- 2