Back to Database
Status published
Medium
CVE-2003-0400
Vignette StoryServer and Vignette V/5 does not properly calculate the...
Vulnerability Description
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0400
Credits & Attribution
No credits recorded in the NVD database.
References
More from vignette
View All →CVE-2018-18941
In Vignette Content Management version 6, it is possible to...
Critical
9.8
CVE-2008-6412
Unspecified vulnerability in Vignette Content Management 7.3.0.5, 7.3.1, 7.3.1.1, 7.4,...
High
7.5
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic...
Medium
5
CVE-2003-0405
Vignette StoryServer 5 and Vignette V/6 allows remote attackers to...
Medium
5
CVE-2003-0404
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4...
Medium
4.3
Affected Vendor
vignette
View all reports →Affected Software
content suite, storyserver, vignette
Vulnerable Versions:
6.0, 4.0, 4.1, 4.2, 5.0
Timeline
Official Publish:
June 11th, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.