Lucene search
FreeBSD6A164D84-2F7F-11D9-A9E7-0001020EED82HistorySep 10, 2004 - 12:00 a.m.
postgresql-contrib -- insecure temporary file creation
2004-09-1000:00:00
vuxml.freebsd.org
23
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
The make_oidjoins_check script in the PostgreSQL RDBMS has
insecure handling of temporary files, which could lead to an
attacker overwriting arbitrary files with the credentials of
the user running the make_oidjoins_check script.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | postgresql-contrib | < 7.2.6 | UNKNOWN |
Related
nessus
nessus
RHEL 3 : rh-postgresql (RHSA-2004:489)
2004-12-21 00:00:00
FreeBSD : postgresql-contrib -- insecure temporary file creation (153)
2004-11-23 00:00:00
Debian DSA-577-1 : postgresql - insecure temporary file
2004-11-10 00:00:00
openvas
openvas
PostgreSQL insecure temporary file creation
2005-11-03 00:00:00
Ubuntu: Security Advisory (USN-6-1)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-577-1)
2008-01-17 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
2004-10-30 00:00:00
postgresql
postgresql
Vulnerability in client contrib module (CVE-2004-0977)
2005-02-09 05:00:00
redhat
redhat
(RHSA-2004:489) rh-postgresql security update
2004-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2004-0977
2005-02-09 00:00:00
cvelist
cvelist
CVE-2004-0977
2004-10-20 04:00:00
cve
cve
CVE-2004-0977
2005-02-09 05:00:00
debian
debian
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
osv
osv
postgresql - symlink vulnerability
2004-10-29 00:00:00
nvd
nvd
CVE-2004-0977
2005-02-09 05:00:00
gentoo
gentoo
PostgreSQL: Insecure temporary file use in make_oidjoins_check
2004-10-18 00:00:00
ubuntu
ubuntu
postgresql contributed script vulnerability
2004-10-27 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for 6A164D84-2F7F-11D9-A9E7-0001020EED82