CVE-2005-1664

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-18 · updated 2026-06-16

Description

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.

Affected products

Microsoft Corporation ASP.NET: 1.0, 1.1

References

http://marc.info/?l=bugtraq&m=111513127704270&w=2
http://marc.info/?l=bugtraq&m=111532887612517&w=2
http://scottonwriting.net/sowblog/posts/3747.aspx
http://secunia.com/advisories/15241
http://www.osvdb.org/16196
https://exchange.xforce.ibmcloud.com/vulnerabilities/20409
http://marc.info/?l=bugtraq&m=111513127704270&w=2
http://marc.info/?l=bugtraq&m=111532887612517&w=2
http://scottonwriting.net/sowblog/posts/3747.aspx
http://secunia.com/advisories/15241
http://www.osvdb.org/16196
https://exchange.xforce.ibmcloud.com/vulnerabilities/20409

Get alerted when CVE-2005-1664 or the next vulnerability affects your stack