CVE-2003-0104: Medium severity PeopleSoft PeopleTools vulnerability
Published Mar 18, 2003
·Updated
Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.
Affected Software
11 affected components
PeopleSoft PeopleTools=8.15
PeopleSoft PeopleTools=8.12
PeopleSoft PeopleTools=8.10
PeopleSoft PeopleTools=8.17
PeopleSoft PeopleTools=8.41
PeopleSoft PeopleTools=8.16
PeopleSoft PeopleTools=8.11
PeopleSoft PeopleTools=8.14
PeopleSoft PeopleTools=8.13
PeopleSoft PeopleTools=8.40
PeopleSoft PeopleTools=8.18
Remediation
Patch Available
Patch Available
Event History
Mar 18, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-0104?
CVE-2003-0104 has a moderate severity level as it allows remote attackers to overwrite arbitrary files and potentially compromise the system.
2
How do I fix CVE-2003-0104?
To fix CVE-2003-0104, upgrade to a version of PeopleTools that is not affected by this vulnerability, such as PeopleTools 8.19 or later.
3
What versions of PeopleTools are affected by CVE-2003-0104?
CVE-2003-0104 affects PeopleTools versions 8.10 through 8.18, 8.40, and 8.41.
4
Can CVE-2003-0104 be exploited remotely?
Yes, CVE-2003-0104 can be exploited remotely through the SchedulerTransfer servlet.
5
What types of attacks can leverage CVE-2003-0104?
CVE-2003-0104 can be leveraged for directory traversal attacks to gain unauthorized access to system files.