CVE-2008-5100

Published: Nov 17, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.

Affected (1)

Products: Microsoft: .net Framework

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0.50727

Related CWEs

References (8)

http://securityreason.com/securityalert/4605

Source: cve@mitre.org

http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx

Source: cve@mitre.org

http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/498311/100/0/threaded

Source: cve@mitre.org

http://securityreason.com/securityalert/4605

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.applicationsecurity.co.il/.NET-Framework-Rootkits.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.applicationsecurity.co.il/LinkClick.aspx?fileticket=ycIS1bewMBI%3d&tabid=161&mid=555

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/498311/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.