Information disclosure in Microsoft .Net Framework
CVE-2007-0042
Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
Vulnerability class: Information Disclosure
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.8 (High). Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.762 (99.5th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.762 · newest: 0.762 · change: 0.000
Affected products
Weakness classification (CWE)
References
- archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html (vendor-advisory)
- docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040 (vendor-advisory)
- www.vupen.com/english/advisories/2007/2482 (vdb-entry)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:2070 (signature, vdb-entry)
- secunia.com/advisories/26003 (Vendor Advisory, third-party-advisory)
- security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Inj…
- www.us-cert.gov/cas/techalerts/TA07-191A.html (US Government Resource, third-party-advisory)
- www.securitytracker.com/id (vdb-entry)