.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

ASP.NET Security Update Shipping Tuesday, Sept 28th

Posted By:      Posted Date: September 28, 2010    Points: 0   Category :ASP.Net
An hour ago Microsoft released an advance notification security bulletin announcing that we are releasing an out-of-band security update to address the ASP.NET Security Vulnerability that I've blogged about this past week.  The security update is fully tested, and is scheduled for release tomorrow - Tuesday September 28th - at approximately 10:00 AM PDT.  The advance notice bulletin is intended to ensure administrators know it is coming, and are better prepared to apply it once the update is available. We'll release the update tomorrow via the Microsoft Download Center (I'll blog links to the individual downloads for each version of .NET).  We will then release the update via Windows Update and the Windows Server Update Service...(read more)

View Complete Post

More Related Resource Links

Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB928366)

I have been trying to install   Security Update for Microsoft .NET Framework, Version 1.1 Service Pack 1 (KB928366)   since it was released but downloads ok but it will not install. Everytime installation of this update fails!   Help...

When attempting to install Security Update Microsoft for the Microsoft 2007 Office system updates (u

When attempting to install "Security Update Microsoft for the Microsoft 2007 Office system updates (updates KB2277947 and KB982331)" the sintallation fails and then I recieve the error "The detection failed, this can be due to a corrupted installation database". System Info: XP Home Edition Version 2002 Service Pack 3 Intel Atom CPU N270 @ 1.60 GHz I am running XP and have installed and run the "Fit It" tool, to no avail. I even tried downloading each update individually, from the Microsoft site, instead of through the automatic update. I also read this same question posted by another user (link: http://social.technet.microsoft.com/Forums/en-US/sharepointadmin/thread/cfa66cd3-2aa2-44ee-9393-ffae41d4f70c/) only to find his info contained no answer either. How do I fix this so that I can get these updates installed?

Security Update for SQL Server 2005 Service Pack 3 (KB970892) could not be installed


Auto updates picked up this update to install but it wouldn't install. I tried doing it manually with no success. Anyone run across this?I have the service pack 2 with updates already. What would cause this?

ASP.NET Security Update Now Available

This morning Microsoft released a security update that addresses the ASP.NET Security Vulnerability that I've blogged about this past week.  We recommend installing it as soon as possible on your web-servers. Common Questions/Answers Below are some answers to a few common questions people have asked: Do the updates require me to change any code? No. The update should not require any code or configuration change to your existing ASP.NET applications. Will I still need to use the workarounds after I install the update? No. The update removes the need to use the security workarounds we've published this past week.  Those were temporary steps that could be taken to protect yourself before the update was released.  After you've installed...(read more)

Security Update for Win 2003 Server (KB980436) causes access error to secure url via WCF



today in the morning i installed 5-6 security updates including (KB980436) on our production server. During the day we got errors when our application calls a secured web service :

An error occurred while making the HTTP request to https://[MyService]. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case. This could also be caused by a mismatch of the security binding between the client and the server.

I had nothing to do because we haven't made any change at our application. Then i remembered the security updates and walked through the update informations. I saw that KB is about :

MS10-049: Vulnerabilities in SChannel could allow remote code execution

I removed this update because its about secure channel, then everything worked fine.

So what should we do ? Who should be informed ?

iis 7 IP Security using System.DirectoryServices : Unable to update


I used the below code to Set  IP Security from my vb.net Application.  It is working in IIS 6 (windows xp, and server 2003).

facing error in IIS 7.5 (windows7).

' Get the IIS object that holds the info for the default site.


Dim SecObj As Object = GetObject("IIS://LocalHost/W3SVC/1/Root/WebServerSCM")


' Get the IIsIPSecurity object.

Latest .NET 4 security update causes problems for ClientAuthenticationServices


Patch KB2416472 causes Membership.ValidateUser within Client Authentication Services to fail while decrypting the Forms Authentication token.  The Encrypted ticket is 272 bytes long and the Maximum allowed length is 256 bytes.

If you uninstall the patch, the problem is resolved. 


Update Active Directory attributes - Security Answer and Password - Console Application



I need to update active directory properties(attributes) through console application like Title,mail,sn,passwordQuestion,passwordAnswer.

DirectoryEntry.Properties["passwordQuestion"].Value = "What is your Favorite Color?";
DirectoryEntry.Properties["passwordAnswer"].Value = "green";

after updating , i check the attributes in Active Directory. All its fine.

the "password answer" saved as plan text.

After logged into asp.net portal with user's credential, it is working fine. After logout, When i goto click forgot password link, it ask the email address after that display the security password question and need to be enter the security password answer.

when i enter the security password answer in the text box , after click submit, it throw the error.

Invalid length for a Base-64 char array. Exception Stack Trace: at System.Convert.FromBase64String(String s) at System.Web.Security.ActiveDirectoryMembershipProvider.Decrypt(String encryptedString) at System.Web.Security.ActiveDirectoryMembershipProvider.ResetPassword(String username, String passwordAnswer) at System.Web.Security.MembershipUser.ResetPassword(String passwordAnswer) at


But i update the passwordQuestion,passwordAnswer through web application(portal)

Hi Need urgent help I downloaded the latest security update for Microsoft .NET Framework 1.1 and it


My title describe the problem which I'm currently in at the moment Security Update for Microsoft .NET Framework 1.1 SP1 on Windows XP, Windows Vista, and Windows Server 2008 x86 (KB2416447)

Download size: 13.7 MB

You may need to restart your computer for this update to take effect.

Update type: Important

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain access to information. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

More information:

Help and Support:

Security Update for SQL Server 2005 Service Pack 2 (KB960089)

Each time I attempt to install the above update it fails.   I am on Windows 7.   Can anyone help please. 

security update .net framework 3.5 sp1 failed


windows update for the security update for microsoft .net framework 3.5 sp1 failed (kb2416473) with a Error Code: 1603 in the log file. other windows updates are installing fine. I already have other net framework 3.5 sp1 installed, as well as other net framwork 2, 3, 3.5 updates installed, including kb958481, kb958483, kb958484 (Family Pack). I searched windows updates errors, not found. searched net framework without finding any related errors. running windows xp media center with sp3. Plenty of free disk space( 60GB).

Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Win XP failed

Hii all, I just tried to patch my system with latest updates, which were huge this time (14 updates of 42 Mb in total). Out of 14 updates 13 were installed successfully and one failed with error code of 0x643:
Microsoft .NET Framework 1.1 Service Pack 1 Security Update for Windows 2000, Windows XP, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 (KB953297)

After restarting my system I authorised the dispatch of the failure report to Microsoft. Now I wonder if anybody else has encountered such problem with this particular update?

Security Update for SQL Server 2005 Service Pack 2 (KB970895) - Error Code: 0x733F -


Thie above update fails to install at every attempt. I've looked around and found others with the same problem, but many of the "solutions" are way too technical for me. I've been asked to post the "summary.txt" file from the hotfix folder in this forum, and it appears below. Please help.

Time: 11/27/2009 14:51:37.449
KB Number: KB970895
Machine: ASUS
OS Version: Microsoft Windows XP Professional Service Pack 3 (Build 2600)
Package Language: 1033 (ENU)
Package Platform: x86
Package SP Level: 2
Package Version: 3080
Command-line parameters specified:
Cluster Installation: No

Prerequisites Check & Status
SQLSupport: Passed

Products Detected                         Language  Level  Patch Level       Platform  Edition
SQL Server Database Services 2005 (SQLEXPRESS)  ENU       SP2    2005.090.3077.00  x86       EXPRESS
SQL Server Tools and Workstation Components 2005  ENU       SP3           9.3.4035  x86       EXPRESS

Products Disqualified & Reason

Security Update for .Net Framework 3.5.1 on Windows 7x86(KB244709) Failed


A security update was pushed out on our network a couple of weeks ago, but one user is getting this error.

I checked that the user is running Windows 7 32 bit.

I attempted to manually install the download from the microsoft page: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=157aa425-953c-4fc9-ab76-4e65d4be8baa&displaylang=en (making sure that I chose the Windows6.1-KB2446709-x86.msu version

I tried running the .msu download, still failed

I tried saving the .msu download to C:\224709 and running the installation from the command line with the following commands

  • expand -f:* "C:\224709\Windows6.1-KB224709-x86.msu" %TEMP%
  • pkgmgr.exe /n:%TEMP%\Windows6.1-KB244709-X86.xml

When I ran the above pkrmgr.exe command an error message popped up saying "Operation Failed: The Component Store has been corrupted"

Just to see if it would still install from the command line anyway I tried the following on the command line

  • wusa.exe C:\224709\Windows6.1-KB224709-x86.msu

Windows installer windows pops up and it begins the installation, but fails part way through and comes up with the same error "Security Update for .N

SharePoint Tutorial - Security

Security in SharePoint is comprised of users, groups and roles.

Users, Groups and Roles

A user account comes from the authentication system. For example, if Active Directory is used to authenticate then the user accounts will come from it.

There are two types of groups SharePoint uses: domain groups and SharePoint groups.

ASP.Net Gridview Edit Update Cancel Commands

In ASP.Net 2.0, GridView Control also provides the functionality to edit and update the data retrieved from the database using CommandField template. You can cancel the action using Cancel Command of the CommandField. GridView consists of events that can be used to perform the actions like edit, update and cancel upon the Data items displayed in the ASP.Net GridView Data Control.

How to format and update GridView and DataGrid rows using JQuery

The behavior described in this question is as expected. When you set text of a cell in grid, it directly affects HTML that is going to be rendered. When you set text value of a cell, it means that you are setting innerText of the cell. The column that GridView creates for command fields (Edit, Delete and Select) are a (anchor) or button elements. So you can see what will happen if you set text value in that cell. It will wipe out those link or button controls and replace them with simple text string.
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend