CVE-2003-0950: High severity PeopleSoft PeopleTools vulnerability
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random (system time) name of the directory used to store the file, and directly requesting that file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0950?
CVE-2003-0950 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2003-0950?
To fix CVE-2003-0950, update your PeopleSoft PeopleTools to the latest version that has patched this vulnerability.
What versions of PeopleSoft PeopleTools are affected by CVE-2003-0950?
CVE-2003-0950 affects PeopleSoft PeopleTools versions 8.1x, 8.2x, 8.4x, and other subsequent versions up to 8.43.
What kind of attacks can occur due to CVE-2003-0950?
Exploitation of CVE-2003-0950 allows remote attackers to execute arbitrary commands on the server.
Is user authentication required to exploit CVE-2003-0950?
No, CVE-2003-0950 can be exploited by unauthenticated remote attackers.