Vulnerabilities > CVE-2003-0400 - Unspecified vulnerability in Vignette Content Suite, Storyserver and Vignette

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
vignette
exploit available
NVD
Published: 2003-06-30
Updated: 2024-11-20

Summary

Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.

Vulnerable Configurations

Part Description Count
Application
Vignette
6

Exploit-Db

  • descriptionVignette StoryServer 4.1 Sensitive Stack Memory Information Disclosure Vulnerability. CVE-2003-0400. Remote exploits for multiple platform
    idEDB-ID:22472
    last seen2016-02-02
    modified2003-04-07
    published2003-04-07
    reporter@stake
    sourcehttps://www.exploit-db.com/download/22472/
    titleVignette StoryServer 4.1 Sensitive Stack Memory Information Disclosure Vulnerability
  • descriptionVignette 4.x/5.0 Memory Disclosure Vulnerability. CVE-2003-0400. Remote exploit for unix platform
    idEDB-ID:22646
    last seen2016-02-02
    modified2003-05-26
    published2003-05-26
    reporterS21Sec
    sourcehttps://www.exploit-db.com/download/22646/
    titleVignette 4.x/5.0 Memory Disclosure Vulnerability

References