CVE-2003-0405

Vignette StoryServer 5 and Vignette V/6 allows remote attackers to execute arbitrary TCL code via 1 an HTTP query or cookie which is processed in the NEEDS command, or 2 an HTTP Referrer that is processed in the VALIDPATHS command...

CVE-2003-0405

CVE-2003-0405 affects Vignette StoryServer 5 and Vignette V/6. A flaw allows remote attackers to execute arbitrary TCL code by supplying crafted input: (1) an HTTP query or cookie processed in the NEEDS command, or (2) an HTTP Referrer processed in the VALID_PATHS command. Root cause: improper ha...