medium5.0Public exploit code
CVE-2003-0400
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vignette 4.x/5.0 - Memory Disclosure2003-05-26 · remote · unix · Verified
- Vignette StoryServer 4.1 - Sensitive Stack Memory Information Disclosure2003-04-07 · remote · multiple · Verified
Impact
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vignette | Content Suite | Version 6.0 |
| Vignette | Storyserver | Versions 4.0, 4.1, 4.2, 5.0 |
| Vignette | Vignette | Version 5.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105405985126857&w=2
- http://www.iss.net/security_center/static/12075.php
- http://www.s21sec.com/es/avisos/s21sec-018-en.txt
- http://www.securityfocus.com/bid/7684
- http://marc.info/?l=bugtraq&m=105405985126857&w=2
- http://www.iss.net/security_center/static/12075.php
- http://www.s21sec.com/es/avisos/s21sec-018-en.txt
- http://www.securityfocus.com/bid/7684