NVD

Id
4884  
Name
CVE-2008-5100  
Description
The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-17  
Modified Date
2009-01-29  
Seq
2008-5100  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30736 4884 CVE-2008-5100 4605  View
30737 4884 CVE-2008-5100 http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx  View
30738 4884 CVE-2008-5100 http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555  View
30739 4884 CVE-2008-5100 20081113 New Whitepaper - .NET Framework Rootkits: Backdoors inside your Framework  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49756 JVNDB-2008-005066 Microsoft .NET Framework 2.0 の strong name (SN) 実装における保護メカニズムを回避される脆弱性 Microsoft .NET Framework 2.0 の strong name (SN) 実装は、DLL ファイルのデジタル署名ではなく同ファイルのパス名に組み込まれたデジタル署名の公開鍵のトークンに依存するため、Global Assembly Cache (GAC) および Code Access Security (CAS) 保護メカニズムを回避される脆弱性が存在します。 CVE-2008-5100 35213 CVE-2008-5100 4884 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005066.html 2008-11-17 2012-09-25 View