?
Solved

Vulnerable Microsoft.NET Framework version: 1.1.4322

Posted on 2011-03-09
2
Medium Priority
?
2,716 Views
Last Modified: 2012-05-11
Description: vulnerable Microsoft.NET Framework version: 1.1.4322 [site & ip address}Windows Server 2003 SP1Mar 08 21:40:25 2011newSeverity: Area of Concern CVE: CVE-2007-0041 CVE-2007-0042 CVE-2007-0043 9.32352new11Impact: On a workstation, a remote attacker could execute arbitrary commands when a user opens a specially crafted web page. On a server, a remote attacker could gain unauthorized access to configuration files. Background: The .NET Framework is a programming model for building Windows applications. Resolution Install the patch referenced in Microsoft Security Bulletins [http://www.microsoft.com/technet/securi ty/bulletin/ms10-041.mspx] 10-041 and [http://www.microsoft.com/technet/securi ty/bulletin/ms10-060.mspx] 10-060. Vulnerability Details: Service: http Received: X-AspNet-Version: 1.1.4322

any idea how to fix this?

I have installed ALL windows updates, and rebooted several times

The server is a windows server 2003, running IIS 6
0
Comment
Question by:l8rgdkd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 

Accepted Solution

by:
l8rgdkd earned 0 total points
ID: 35083989
According to Security metrics scan experts, this is the KB to fix the problem:

http://support.microsoft.com/kb/979907

and here is the download to the KB

http://www.microsoft.com/downloads/en/confirmation.aspx?FamilyID=f82e1b73-7f8b-4f4c-8187-4050a11db44c


Im running a scan now to see if this worked or not
0
 

Author Comment

by:l8rgdkd
ID: 35094327
installed this update... it still didnt make the error go away. so i sent them a screenshot where i installed it and they removed the message from my reports.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This course is ideal for IT System Administrators working with VMware vSphere and its associated products in their company infrastructure. This course teaches you how to install and maintain this virtualization technology to store data, prevent vuln…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question