IIS Server Security - HTTP Response Splitting in ASP.NET 2.0

This is Interesting: Free IT Magazines

Home > Archive > IIS Server Security > November 2006 > HTTP Response Splitting in ASP.NET 2.0

You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author

HTTP Response Splitting in ASP.NET 2.0

Vikram Sinha

2006-11-28, 7:29 am

Are applications built on ASP.NET 2.0 still vulnerable to "HTTP response
splitting" attacks inspite of enableheaderschecking, request validation and
CR/LF checks in response.redirect?

If vulnerability does exist, what are the additional things that the
developers need to take care themselves in order to protect their sites from
response splitting attacks.