Apparently there is a security vulnerability in ASP.NET. Check out the details here: http://www.microsoft.com/security/incident/aspnet.mspx
By the way, here http://sourceforge.net/mailarchive/message.php?msg_id=9678578 is explained what is going on with this vulnerability...