Test ID:	1.3.6.1.4.1.25623.1.0.902551
Category:	Windows : Microsoft Bulletins
Title:	Microsoft .NET Framework Information Disclosure Vulnerability (2567951)
Summary:	This host is missing an important security update according to; Microsoft Bulletin MS11-069.
Description:	Summary: This host is missing an important security update according to Microsoft Bulletin MS11-069. Vulnerability Insight: The flaw is due to an error when validating the trust level within the System.Net.Sockets namespace and can be exploited to bypass CAS (Code Access Security) restrictions or disclose information via a specially crafted web page viewed using a browser that supports XBAPs (XAML Browser Applications). Vulnerability Impact: Successful exploitation could allow attacker to bypass certain security restrictions or gain knowledge of sensitive information. Affected Software/OS: - Microsoft .NET Framework 4.0 - Microsoft .NET Framework 3.5.1 - Microsoft .NET Framework 2.0 Service Pack 2 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1978 Microsoft Security Bulletin: MS11-069 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-069 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12901
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.