Monthly Archives: September 2010

Vulnerability in ASP.NET Could Allow Information Disclosure

UPDATE (2010-09-29): Microsoft has release the fix. It should be available through Windows Update.
More Info:

Microsoft Security Advisory just announced a vulnerability in ASP.NET that can lead to information disclosure. You can read the complete announcement at

Important: Please make sure you read the Workaround section and do appropriate action based on your websites’ config.

Additional information can also be found at Scott Gu’s blog post

How to recover from “Object reference not set to an instance of an object” error blocking access to Umbraco control panel

I shocked when I found that I couldn’t access Umbraco control panel of one of the most important websites that my client has. It threw “Object reference not set to an instance of an object” error once I successfully logged in to the control panel.


After making backup and small research I found a way to recover from that annoying thing. The workaround was recycling the Application Pool that the website use.