Microsoft ASP.NET Security Vulnerability: "padding oracle"