Provided by Aanval (Snort & Syslog Intrusion Detection and Correlation Engine) www.aanval.com
--
GEN:SID | 1:2277 |
Message | WEB-MISC PeopleSoft PeopleBooks psdoccgi access |
Summary | This event is generated when an attempt is made to exploit a directory traversal vulnerability in the cgi application PeopleSoft PeopleBooks. |
Impact | Information gathering. |
Detailed Information | This event may indicate an attempt is made to exploit a directory traversal vulnerability in the cgi application PeopleSoft PeopleBooks. The script psdoccgi.exe does not sufficiently check script arguements for the "headername" and "footername" variables. An attacker may exploit this issue to access files outside the root of the web server. |
Affected Systems | PeopleTools versions 8.43 and earlier. |
Attack Scenarios | An attacker can use directory traversal techniques to access sensitive system files to gain information necessary for further system compromise. |
Ease of Attack | Simple. No exploit code required. |
Corrective Action | Upgrade to the latest non-affected version of the software. |
Additional References | |
Rule References | bugtraq: 9037 bugtraq: 9038 cve: 2003-0626 cve: 2003-0627 |
--
DID:615831
--
http://www.aanval.com/