Monthly Archives: September 2010

Vulnerability in ASP.NET Could Allow Information Disclosure

Leave a reply

UPDATE (2010-09-29): Microsoft has release the fix. It should be available through Windows Update.
More Info: http://weblogs.asp.net/scottgu/archive/2010/09/28/asp-net-security-update-now-available.aspx

Microsoft Security Advisory just announced a vulnerability in ASP.NET that can lead to information disclosure. You can read the complete announcement at http://www.microsoft.com/technet/security/advisory/2416728.mspx

Important: Please make sure you read the Workaround section and do appropriate action based on your websites’ config.

Additional information can also be found at Scott Gu’s blog post http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx

How to recover from “Object reference not set to an instance of an object” error blocking access to Umbraco control panel

1 Reply

I shocked when I found that I couldn’t access Umbraco control panel of one of the most important websites that my client has. It threw “Object reference not set to an instance of an object” error once I successfully logged in to the control panel.

image

After making backup and small research I found a way to recover from that annoying thing. The workaround was recycling the Application Pool that the website use.