Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0400. PoCs published by S21Sec, @stake.
AI-analyzed exploit summary The exploit describes an information leakage vulnerability in Vignette StoryServer due to improper handling of URI variables, potentially exposing memory contents. The provided URL demonstrates the issue but lacks executable code.
Description
Vignette StoryServer and Vignette V/5 does not properly calculate the size of text variables, which causes Vignette to return unauthorized portions of memory, as demonstrated using the "-->" string in a CookieName argument to the login template, referred to as a "memory leak" in some reports.
Exploits (2)
The exploit describes an information leakage vulnerability in Vignette StoryServer due to improper handling of URI variables, potentially exposing memory contents. The provided URL demonstrates the issue but lacks executable code.
This writeup describes an information leakage vulnerability in Vignette StoryServer where a crafted request triggers an error state, exposing stack memory content. The attack involves a malformed URL parameter to provoke an error message containing sensitive data.