This post originated from an RSS feed registered with .NET Buzz by Anand M. Original Post: ASP.NET Security Hole Feed Title: .NET From India Feed URL: http://www.dotnetindia.com/index.rss Feed Description: Your daily dose of .NET From India Latest .NET Buzz Posts Latest .NET Buzz Posts by Anand M Latest Posts From .NET From India

If you are running an ASP.NET web site and use Forms authentication, you better read this MS security bulletin on a hole in the way ASP.NET handles cannonical URL representations.

There is KB article on how to protect your site against such attacks called Programmatically check for canonicalization issues with ASP.NET