VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 30, 2003· Updated Jun 16, 2026

CVE-2003-0400

CVE-2003-0400

Description

Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Vignette/Content Suite
    cpe:2.3:a:vignette:content_suite:6.0:*:*:*:*:*:*:*
  • Vignette/Storyserver5 versions
    cpe:2.3:a:vignette:storyserver:4.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:vignette:storyserver:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:vignette:storyserver:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:vignette:storyserver:5.0:*:*:*:*:*:*:*
    • (no CPE)
  • Vignette/Vignette
    cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*
  • Vignette/V/5llm-fuzzy

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.