Vulnerability Description
The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | .Net Framework | 2.0.50727 |
Related Weaknesses (CWE)
References
- http://securityreason.com/securityalert/4605
- http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx
- http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&taExploit
- http://www.securityfocus.com/archive/1/498311/100/0/threaded
- http://securityreason.com/securityalert/4605
- http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx
- http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&taExploit
- http://www.securityfocus.com/archive/1/498311/100/0/threaded
FAQ
What is CVE-2008-5100?
CVE-2008-5100 is a vulnerability with a CVSS score of 10.0 (HIGH). The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of th...
How severe is CVE-2008-5100?
CVE-2008-5100 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-5100?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft .Net Framework.