Info: Security Hole in .NET

Below you find a translation from the German magazine Stern about .NET


Expert: Microsoft technology " NET " has safety hole

Redmond/Dulles (dpa) - experts a safety hole in the program
discovered one day after the presentation of the first building
block of the new Microsoft technology " NET " (Dot Net). The
error can make all programs susceptible to attacks, which was
created with the tool " Visual studio NET ", said Gary McCraw,
technology boss of the company Cigital Inc. in Dulles (US Federal
State Viginia) on Friday.

Microsoft founder Bill Gates had celebrated this week in San
Francisco before large public the introduction on the market of "
Visual studio NET " and had called it " crucial step " for the coming
generation of Internet programs. Microsoft tries to solve
themselves from dependency on the market the personnel
computer and enter more strongly into the network business.
Here so far companies dominate such as Sun Microsystems, IBM
or BEA of system.

The safety gap gives after representation of the specialty service
the heise.de possibility to aggressors of seeing by a Buffer in
such a way specified OVERFLOW (buffer error) for example files
on an other computer or of taking over even the check of the
device.

Microsoft speaker Jim Desler said, his enterprise the report of
Cigital will check. " it seems to concern however a relatively
closely limited and technical lack. " The safety gap in " Visual
studio NET " is in a long series of safety problems with Microsoft
products. The coworkers of Microsoft had recently requested
gates to grant to security a higher value.