Lucene search
MitreCVE-2003-0104HistorySep 01, 2004 - 4:00 a.m.
CVE-2003-0104
2004-09-0104:00:00
mitre
web.nvd.nist.gov
48
cve-2003-0104
directory traversal
peopletools
vulnerability
remote attackers
overwrite
schedulertransfer servlet
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.006
Percentile
79.4%
Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.
Affected configurations
Node
peoplesoftpeopletoolsMatch8.10
ORpeoplesoftpeopletoolsMatch8.11
ORpeoplesoftpeopletoolsMatch8.12
ORpeoplesoftpeopletoolsMatch8.13
ORpeoplesoftpeopletoolsMatch8.14
ORpeoplesoftpeopletoolsMatch8.15
ORpeoplesoftpeopletoolsMatch8.16
ORpeoplesoftpeopletoolsMatch8.17
ORpeoplesoftpeopletoolsMatch8.18
ORpeoplesoftpeopletoolsMatch8.40
ORpeoplesoftpeopletoolsMatch8.41
| Vendor | Product | Version | CPE |
|---|---|---|---|
| peoplesoft | peopletools | 8.10 | cpe:2.3:a:peoplesoft:peopletools:8.10:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.11 | cpe:2.3:a:peoplesoft:peopletools:8.11:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.12 | cpe:2.3:a:peoplesoft:peopletools:8.12:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.13 | cpe:2.3:a:peoplesoft:peopletools:8.13:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.14 | cpe:2.3:a:peoplesoft:peopletools:8.14:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.15 | cpe:2.3:a:peoplesoft:peopletools:8.15:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.16 | cpe:2.3:a:peoplesoft:peopletools:8.16:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.17 | cpe:2.3:a:peoplesoft:peopletools:8.17:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.18 | cpe:2.3:a:peoplesoft:peopletools:8.18:*:*:*:*:*:*:* |
| peoplesoft | peopletools | 8.40 | cpe:2.3:a:peoplesoft:peopletools:8.40:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.006
Percentile
79.4%
Related for CVE-2003-0104