473,657 Members | 2,432 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Was security hole in dotnet 1.1 fixed in dotnet 2.0

Hello,

Does Dotnet 2.0 Framework still have the security hole that Dotnet 1.1
Framework had regarding HTTP-Post method for web services?

TIA
Feb 8 '07 #1
3 1447
Q. What's a "Security hole"? In 2.0, you have the ability to allow or
disallow various protocols, if that's what you mean.
Peter

--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net


"Chuck" wrote:
Hello,

Does Dotnet 2.0 Framework still have the security hole that Dotnet 1.1
Framework had regarding HTTP-Post method for web services?

TIA
Feb 8 '07 #2
Peter,

Our third party web service provider, said their was a security issue with
using HTTP-Post method with DotNet Framework 1.1.
So they disabled it. So I was wondering if it was fixed in DotNet Framework
2.0.

TIA,

Chuck
"Peter Bromberg [C# MVP]" <pb*******@yaho o.yabbadabbadoo .comwrote in
message news:0F******** *************** ***********@mic rosoft.com...
Q. What's a "Security hole"? In 2.0, you have the ability to allow or
disallow various protocols, if that's what you mean.
Peter

--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net


"Chuck" wrote:
>Hello,

Does Dotnet 2.0 Framework still have the security hole that Dotnet 1.1
Framework had regarding HTTP-Post method for web services?

TIA

Feb 8 '07 #3
OK. Unless you can zero - in on exactly what this purported security hole in
1.1 actually is, it would probably be hard to determine if it has been
"fixed" in 2.0, no?
Cheers,
Peter
--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net


"Chuck" wrote:
Peter,

Our third party web service provider, said their was a security issue with
using HTTP-Post method with DotNet Framework 1.1.
So they disabled it. So I was wondering if it was fixed in DotNet Framework
2.0.

TIA,

Chuck
"Peter Bromberg [C# MVP]" <pb*******@yaho o.yabbadabbadoo .comwrote in
message news:0F******** *************** ***********@mic rosoft.com...
Q. What's a "Security hole"? In 2.0, you have the ability to allow or
disallow various protocols, if that's what you mean.
Peter

--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net


"Chuck" wrote:
Hello,

Does Dotnet 2.0 Framework still have the security hole that Dotnet 1.1
Framework had regarding HTTP-Post method for web services?

TIA


Feb 8 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

28
2786
by: grahamd | last post by:
Who are the appropriate people to report security problems to in respect of a module included with the Python distribution? I don't feel it appropriate to be reporting it on general mailing lists.
0
1337
by: Laphan | last post by:
Hi Guys I develop an accounting package that uses SQL/MSDE 2000 as the RDBMS. Its really hard for me to get new clients to look at my product when they have to download a minimum of 25MB (ie, MSDE installer) just to have a look at it. Now that I've got a fixed IP ADSL connection, I wanted to host a demo SQL db so that users can simply log in with my program (only 3MB tops) and see it.
6
1749
by: WhenAmIOn.com | last post by:
Hi all, I developed a web site that uses javascript and XMLHTTP to dynamically load info on the page from the server without having to re-load the page. Recently I've received complaints of it not working, and the common thread is that these users have Norton Internet Security installed (sorry, don't know the version, but let's assume the latest). I don't have NIS. Can anyone give me clear instructions as to how a user can change his/her...
2
367
by: Freeserve | last post by:
Not sure whether this is the right group, but I can't find anything in the ..NET groups and my apologies if this has already been covered or is considered "off subject". I am looking at using an Access database to hold data which will be handled via VB.NET and I am not sure about some of the security aspects. I am going the .NET route as part of the application involves using a Pocket PC and I don't want part to involve deploying...
4
1325
by: Mathew | last post by:
Hello: I have an app that has been running for several months, but after installing SP4 on the Win2k server, it would no longer run. First I had a TemplateControl parser exception when the server tried to compile and run the ASPX page. (Which runs fine on my workstation).
4
1409
by: Patrick Olurotimi Ige | last post by:
Huge security hole in .NET: Java creator http://www.zdnet.com.au/news/security/0,2000061744,39179932,00.htm *** Sent via Developersdex http://www.developersdex.com *** Don't just participate in USENET...get rewarded for it!
5
2056
by: Norsoft | last post by:
I have a .Net 1.1 application which is downloaded into an aspx page. It is a dll which inherits from System.Windows.Forms.UserControl. It works fine on a PC with only the 1.1 Framework. However, the control will not load on a PC with the 2.0 Framework installed. I know that IE will use the newest framework so I assume it is a security issue. At the assembly level I apply the following attributes;
3
959
by: Joe Abou Jaoude | last post by:
hi, Is there a way to detect if code access security is disabled (using caspol -security off for example) I know that in COM+ you can detect if role-based security is disabled using the ContextUtil.IsSecurityEnabled Property. I was wondering if something similar can be done to detect if code access security is off. thanks
19
2356
by: Blair P. Houghton | last post by:
I'm just learning Python, so bear with. I was messing around with the webbrowser module and decided it was pretty cool to have the browser open a URL from within a python script, so I wrote a short script to open a local file the same way, using the script file as an example target: # browser-test.py import webbrowser import sys
0
8413
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8324
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8740
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8513
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8617
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
7352
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6176
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4173
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
2
1733
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.