As you guys might hear about ASP.NET Vulnerability previously, you might wonder how to workaround it. In the meantime while waiting for the patch, Microsoft recommended a strategy to workaround ASP.NET Vulnerability in its authentication system by adding the following code:
<script language="C#" runat="server">
void Application_BeginRequest(object source, EventArgs e) {
if (Request.Path.IndexOf('\\') >= 0 ||
System.IO.Path.GetFullPath(Request.PhysicalPath) != Request.PhysicalPath) {
throw new HttpException(404, "not found");
}
}
</script>
as appeared in KB887459