Security Updates for Microsoft .NET Framework (July 2019)

High Nessus Plugin ID 126600

Synopsis

The Microsoft .NET Framework installation on the remote host is affected by multiple vulnerabilities.

Description

The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

- An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys. This vulnerability allows an attacker to impersonate another user, which can lead to elevation of privileges. The vulnerability exists in WCF, WIF 3.5 and above in .NET Framework, WIF 1.0 component in Windows, WIF Nuget package, and WIF implementation in SharePoint. An unauthenticated attacker can exploit this by signing a SAML token with any arbitrary symmetric key. This security update addresses the issue by ensuring all versions of WCF and WIF validate the key used to sign SAML tokens correctly.
(CVE-2019-1006)

- A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
(CVE-2019-1113)

- A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application. The update addresses the vulnerability by correcting how the .NET web application handles web requests. (CVE-2019-1083)

Solution

Microsoft has released security updates for Microsoft .NET Framework.

See Also

http://www.nessus.org/u?3bfac69e

http://www.nessus.org/u?dd6e86c0

http://www.nessus.org/u?9bd4e25a

http://www.nessus.org/u?858ef63b

http://www.nessus.org/u?0de7f142

http://www.nessus.org/u?8b8b7b50

http://www.nessus.org/u?eb25ce98

http://www.nessus.org/u?1e436e1f

http://www.nessus.org/u?2123a8a4

http://www.nessus.org/u?fef03323

http://www.nessus.org/u?ce4aeddd

http://www.nessus.org/u?8d3a86a9

http://www.nessus.org/u?f489340c

http://www.nessus.org/u?ff0c98be

http://www.nessus.org/u?7a0ad909

http://www.nessus.org/u?4741f3da

http://www.nessus.org/u?ccd5eb26

http://www.nessus.org/u?df72c2c1

http://www.nessus.org/u?dfda1841

Plugin Details

Severity: High

ID: 126600

File Name: smb_nt_ms19_jul_dotnet.nasl

Version: 1.3

Type: local

Agent: windows

Published: 2019/07/10

Updated: 2019/07/15

Dependencies: 13855, 57033, 51351, 99364

Risk Information

Risk Factor: High

CVSS Score Source: CVE-2019-1113

CVSS v2.0

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS v3.0

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:microsoft:.net_framework

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Patch Publication Date: 2019/07/09

Vulnerability Publication Date: 2019/07/09

Reference Information

CVE: CVE-2019-1006, CVE-2019-1083, CVE-2019-1113

BID: 108977, 108981

MSKB: 4507435, 4507460, 4507423, 4507422, 4507421, 4507420, 4507414, 4507419, 4507412, 4507413, 4507411, 4506991, 4507450, 4506987, 4506986, 4507455, 4506989, 4506988, 4507458

MSFT: MS19-4507435, MS19-4507460, MS19-4507423, MS19-4507422, MS19-4507421, MS19-4507420, MS19-4507414, MS19-4507419, MS19-4507412, MS19-4507413, MS19-4507411, MS19-4506991, MS19-4507450, MS19-4506987, MS19-4506986, MS19-4507455, MS19-4506989, MS19-4506988, MS19-4507458

IAVA: 2019-A-0240