Vulnerability Description
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Peoplesoft | Peopletools | 8.4 |
References
- http://www.securityfocus.com/bid/9041Vendor Advisory
- http://xforce.iss.net/xforce/alerts/id/157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12805
- http://www.securityfocus.com/bid/9041Vendor Advisory
- http://xforce.iss.net/xforce/alerts/id/157
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12805
FAQ
What is CVE-2003-0950?
CVE-2003-0950 is a vulnerability with a CVSS score of 7.5 (HIGH). PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of t...
How severe is CVE-2003-0950?
CVE-2003-0950 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0950?
Check the references section above for vendor advisories and patch information. Affected products include: Peoplesoft Peopletools.