CVE-2003-0627

概要

参考情報

• archives.neohapsis.com/archives/vulnwatch/2003-q4/0042.html
• lists.grok.org.uk/pipermail/full-disclosure/2003-November/013652.html
• secunia.com/advisories/10225
• securityfocus.com/bid/9038
• exchange.xforce.ibmcloud.com/vulnerabilities/13754

peopletools のその他の脆弱性

• CVE-2006-0584低 2.1The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which makes it easier for l…
• CVE-2003-0950高 7.5PeopleSoft PeopleTools 8.1x, 8.2x, and 8.4x allows remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet…
• CVE-2003-0629中 4.3Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to inser…
• CVE-2003-0628中 5.0PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the ful…
• CVE-2003-0626中 5.0psdoccgi.exe in PeopleSoft PeopleTools 8.4 through 8.43 allows remote attackers to read arbitrary files via the (1) headername or (2) footer…