Vulnerabilities > CVE-2005-1665 - Denial-Of-Service vulnerability in ASP.Net 1.0/1.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
microsoft

Summary

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2