CVE-2002-0385

Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*
cpe:2.3:a:vignette:storyserver:6.0:*:*:*:*:*:*:*
cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*

Information

Published : 2004-05-31 21:00

Updated : 2017-07-10 18:29


NVD link : CVE-2002-0385

Mitre link : CVE-2002-0385


JSON object : View

Advertisement

dedicated server usa

Products Affected

vignette

  • storyserver
  • vignette