CVE-2005-1664
- State
- Published
- Severity
- Not scored
- Published
- May 18, 2005
- Updated
- Aug 7, 2024
- Reserved
- May 18, 2005
Description
The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20050503 ASP.NET __VIEWSTATE crypto validation prone to replay attacksmailing-list
- http://scottonwriting.net/sowblog/posts/3747.aspx
- 20050505 Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacksmailing-list
- ms-aspnet-viewstate-replay(20409)vdb-entry
- 15241third-party-advisory
- 16196vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.