Microsoft has published a workaround for a security vulnerability in its ASP.NET software which was exposed last week.
The company admitted to the problem in a security advisory published on Friday after it was announced elsewhere.
"A few hours ago we released a Microsoft security advisory about a vulnerability in ASP.NET. This vulnerability exists in all versions of ASP.NET 2," wrote Windows developer Scott Guthrie in a blog post.
"This vulnerability was publically disclosed late Friday at a security conference. We recommend that all customers immediately apply a workaround to prevent attackers using this vulnerability against your ASP.NET applications."
The flaw gives attackers the ability to request and download files from within an ASP.NET application, which could include the web.config file.
Another option for attackers is the ability to decrypt any data sent to a client machine in an encrypted state, i.e. material that is likely to be sensitive.
Guthrie explained that the vulnerability requires many access attempts before an attacker could ascertain that it exists.
"By making many such requests (and watching what errors are returned) the attacker can learn enough to successfully decrypt the rest of the cipher text," he said.
Administrators are advised to enable the
This will prevent hackers from "distinguishing between the different types of errors that occur on a server", according to Guthrie.
Microsoft has also released a small code patch for ASP.NET. Affected software includes Windows XP, including SP3 and Professional, Windows Server 2003 and 2008, Windows Vista and Windows 7.
Cotton seedling freezes to death as Chang'e-4 shuts down for the Moon's 14-day lunar night
Fortnite easily out-earns PUBG, Assassin's Creed Odyssey and Red Dead Redemption 2 in 2018
Meteor showers as a service will be visible for about 100 kilometres in all directions
Saturn's rings only formed in the past 100 million years, suggests analysis of Cassini space probe data
New findings contradict conventional belief that Saturn's rings were formed along with the planet about 4.5 billion years ago