Unscored severity · published Nov 13, 2003
CVE-2003-0626
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments
–
CVSS
1.5%
EPSS
No
On KEV
Description
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footername arguments.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Peopletools · Peoplesoft
8.4; 8.10; 8.11; 8.12; 8.13; 8.14; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0626
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0626
Vendor Advisory
http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html
www.auscert.org.au
http://www.auscert.org.au/render.html?it=3610
Patch
http://www.secunia.com/advisories/10225/
Vendor Advisory
http://www.securityfocus.com/bid/9037
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/13754
More from Peopletools
–
CVE-2006-0584
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for local users to guess passwords using a…
–
CVE-2003-0627
psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to cause a denial of service (application crash), possibly via the headername and footername…
–
CVE-2003-0629
Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain…
–
CVE-2003-0628
PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include…
–
CVE-2003-0950
PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet, guessing the insufficiently random…