New Development - ASP.NET Vulnerability
Today, Microsoft released additional info and tools in conjunction with the vulnerability. Got this detail from my lead - Ben. Here's the updates:
New tool - Module Scanner
887290 How to use the ASP.NET ValidatePath Module Scanner (VPModuleScanner.js)
Deploying methods - GPO and SMS2003
887405 How to use Windows Installer and Group Policy to deploy the VPModule.msi in an Active Directory domain
887404 How to use Systems Management Server 2003 to deploy the ValidatePath module
Information:
887289 HTTP module to check for canonicalization issues with ASP.NET
Updated security incident page - What You Should Know About a Reported Vulnerability in Microsoft ASP.NET