CVE-2007-0042

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 76.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-07-10 · updated 2026-06-16
Weakness: CWE-200

Description

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."

Affected products

Microsoft .NET Framework: 1.0, 1.1, 2.0

References

http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
http://secunia.com/advisories/26003
http://security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Injection_Vulnerabilities.pdf
http://www.securitytracker.com/id?1018356
http://www.us-cert.gov/cas/techalerts/TA07-191A.html
http://www.vupen.com/english/advisories/2007/2482
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-040
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2070
http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html
http://secunia.com/advisories/26003
http://security-assessment.com/files/advisories/2007-07-11_Multiple_.NET_Null_Byte_Injection_Vulnerabilities.pdf
http://www.securitytracker.com/id?1018356

Get alerted when CVE-2007-0042 or the next vulnerability affects your stack