We are a .Net developer shop. Our client pretty much looks after their servers in house but can sometimes need some assistance. They are running 2003 R2 (x86) SP1 servers. With regards to the ASP.NET vunerability:
I can not find any information that talks directly about SP1 for 2003. I get the feeling that it is either doesn't effect, or more likely can not be patched until you are at at least SP2. Does anyone know what the situation is please?