ASP.NET Security Vulnerability Discovered. Install the patch!

[Steve C. Orr [MVP, MCSD]]

There's a newly discovered vulnerability in ASP.NET that you all need to
know about.

The easiest solution (which I recommend) is to install VPModule.msi from the
following link, but Microsoft has given some other solutions as well.

Here's more info:
http://www.microsoft.com/security/incident/aspnet.mspx

http://support.microsoft.com/?kbid=887289

 

[Guest]

This patch seems to cause a massive performance loss on W2K machines. Have
Microsoft also seen this? Is there another recommended fix for W2K machines?
(I added the check in my code following the Microsoft article and that also
causes a huge performance loss). The performance of XP machines seems to be
unaffected by this patch but I have a customer who has reported the same
performance loss on a Windows Server 2003 machine.