Important Notice from AspDotNetStorefront
It is with dismay that we report that we have been forced, through the action of hackers, to shut off write-access to this forum. We are keen to leave the wealth of material available to you for research. We have opened a new forum from which our community of users can seek help, support and advice from us and from each other. To post a new question to our community, please visit: http://forums.vortx.com
Results 1 to 9 of 9

Thread: Latest MS Security Update

  1. #1
    parrothead is offline Member
    Join Date
    Mar 2008
    Posts
    32

    Default Latest MS Security Update

    Is anyone else having a problem with the security patch from August 10th? I'm referring to a security patch to the .NET 2.0 SP2 and .NET 3.5 SP1.

    After applying this patch to my development machine, any user authentication causes a crash in the Security.vb module and I get the following error.

    Attempted to read or write protected memory. This is often an indication that other memory is corrupt.

    System.TypeInitializationException was unhandled by user code
    Message="The type initializer for 'AspDotNetStorefrontEncrypt.Encrypt' threw an exception."
    Source="AspDotNetStorefrontEncrypt"
    TypeName="AspDotNetStorefrontEncrypt.Encrypt"
    StackTrace:
    at AspDotNetStorefrontEncrypt.Encrypt.ComputeSaltedHa sh(Int32 Salt, String ClearPassword)
    at AspDotNetStorefrontCommon.Password..ctor(String ClearPassword, Int32 Salt) in D:\Source Code\ASPDotNetStorefront\7.0.2.1\ASPDNSFCommon\Sec urity.vb:line 491


    I have the source code but not for AspDotNetStorefrontEncrypt as this is a DLL. The only change to the development environment was the security patch.

    Anyone????
    Parrothead
    "I'd rather die while I'm livin' than live while I'm dead."

  2. #2
    ssgumby is offline Senior Member
    Join Date
    Feb 2009
    Posts
    683

    Default

    Did you ever get your site working?

    I have a pending MS update on my server and now im fearful of running it!

  3. #3
    DotNetDevelopments is offline Senior Member
    Join Date
    Jul 2008
    Location
    Harlow / Essex / UK
    Posts
    619

    Default

    My dev server is working fine after all patches and is currently up to date. My dev is very 8 however so I am not sure if that comes into play as you are on ver 7.

    Plus I am pretty sure our live server had a restart with all the latest updates and that is running fine (touch wood!)
    =====
    Version (Code/DB): AspDotNetStorefront MSx 9.1.0.1/9.1.0.0
    Execution Mode: 64 Bit
    Dot Net Developments - E-commerce By Experience

  4. #4
    mikemurphy is offline Senior Member
    Join Date
    Mar 2006
    Location
    United Kingdom
    Posts
    207

    Default

    we're running fine also with latest updates
    8.0.1.4 W2008R2 64-bit MSSQL2005

  5. #5
    ssgumby is offline Senior Member
    Join Date
    Feb 2009
    Posts
    683

    Default

    Thanks for chiming in, I feel a little more comfortable now.

    I didnt even notice they were on v 7 ... that could possibly be the issue.

  6. #6
    parrothead is offline Member
    Join Date
    Mar 2008
    Posts
    32

    Angry Still no luck!

    Still no luck so far. I've been scouring the MS website to try to see if there's been any other problems reported with this patch. I ran into a similar problem about a year ago with VS2005 and one of the MS updates and wound up having to rebuild the machine. I would rather not have to do that again.
    Parrothead
    "I'd rather die while I'm livin' than live while I'm dead."

  7. #7
    ssgumby is offline Senior Member
    Join Date
    Feb 2009
    Posts
    683

    Default

    parrothead (LOVE the name by the way )

    Since you are running an older version, this article may be of help.


    https://support.aspdotnetstorefront....barticleid=208

  8. #8
    AspDotNetStorefront Staff - Scott's Avatar
    AspDotNetStorefront Staff - Scott is offline Administrator
    Join Date
    Mar 2007
    Location
    Ashland, OR
    Posts
    2,390

    Default

    Sounds like something along the lines of this. Check to see if the update actually installed .NET 3.5, in which case you'll have to remove it.

    Keep in mind that you can't just uninstall 3.5, you'll have to remove .NET entirely and then reinstall just 2

  9. #9
    parrothead is offline Member
    Join Date
    Mar 2008
    Posts
    32

    Default I'll try anything once

    .NET 3.5 was installed before (not sure why) and it was working fine. I am attempting to restore .NET 3.5 SP1 to its original state and see if it will play nicely in the sandbox again.

    Thanks for the information.
    Parrothead
    "I'd rather die while I'm livin' than live while I'm dead."