Can there be buffer overflow/overrun vulnerabilities in completely managed asp.net web portal.If yes how can this be tested.
Not unless you exploit the webserver or .NET/ASP.NET stack itself.