CVE Vulnerabilities

CVE-2003-0400

Published: Jun 30, 2003 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the –> string in a CookieName argument to the login template, referred to as a memory leak in some reports.

Affected Software

Name Vendor Start Version End Version
Content_suite Vignette 6.0 (including) 6.0 (including)
Storyserver Vignette 4.0 (including) 4.0 (including)
Storyserver Vignette 4.1 (including) 4.1 (including)
Storyserver Vignette 4.2 (including) 4.2 (including)
Storyserver Vignette 5.0 (including) 5.0 (including)
Vignette Vignette 5.0 (including) 5.0 (including)

References