30

Stories about: UrlScan

New Mitigation Instructions for 0-Day ASP.NET Vulnerability Microsoft has published new mitigation instructions for an unpatched ASP.NET vulnerability, which involves using the UrlScan IIS module to block certain requests.The vulnerability, identified as CVE-2010-3332, was disclosed earlier this month by security researchers Juliano Rizzo and Thai Duong at the ekoparty Securi... 25 September 2010 04:16 GMT SQL Injection Malicious Tools Cost on Average $63 In mid-2008 Microsoft made available three security tools (one developed in conjunction with the HP Web Security Research Group) designed to counter the increasing wave of SQL injection attacks faced by customers running its software. SQL injection attacks were escalating at that point, targeting design flaws in web ... 28 November 2008 10:57 GMT Download UrlScan 3.1 UrlScan is a free security tool available for download from Microsoft designed to bulletproof websites developed and running on top of Windows server operating systems and Internet Information Services. Delivered in order to filter SQL injection attacks, UrlScan is now at version 3.1, less than three months following... 3 November 2008 07:11 GMT