Lucene search
UbuntuUSN-6-1HistoryOct 27, 2004 - 12:00 a.m.
postgresql contributed script vulnerability
2004-10-2700:00:00
ubuntu.com
45
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Releases
- Ubuntu 4.10
Details
Recently, Trustix Secure Linux discovered a vulnerability in the
postgresql-contrib package. The script “make_oidjoins_check” created
temporary files in an insecure way, which allowed a symlink attack to
create or overwrite arbitrary files with the privileges of the user
invoking the script.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 4.10 | noarch | postgresql-contrib | < * | UNKNOWN |
References
Related
nessus
nessus
PostgreSQL make_oidjoins_check Arbitrary File Overwrite
2004-10-04 00:00:00
RHEL 3 : rh-postgresql (RHSA-2004:489)
2004-12-21 00:00:00
FreeBSD : postgresql-contrib -- insecure temporary file creation (153)
2004-11-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 577-1 (postgresql)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200410-16 (PostgreSQL)
2008-09-24 00:00:00
PostgreSQL insecure temporary file creation
2005-11-03 00:00:00
debian
debian
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
osv
osv
postgresql - symlink vulnerability
2004-10-29 00:00:00
nvd
nvd
CVE-2004-0977
2005-02-09 05:00:00
gentoo
gentoo
PostgreSQL: Insecure temporary file use in make_oidjoins_check
2004-10-18 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
2004-10-30 00:00:00
postgresql
postgresql
Vulnerability in client contrib module (CVE-2004-0977)
2005-02-09 05:00:00
redhat
redhat
(RHSA-2004:489) rh-postgresql security update
2004-12-20 00:00:00
ubuntucve
ubuntucve
CVE-2004-0977
2005-02-09 00:00:00
cvelist
cvelist
CVE-2004-0977
2004-10-20 04:00:00
freebsd
freebsd
postgresql-contrib -- insecure temporary file creation
2004-09-10 00:00:00
cve
cve
CVE-2004-0977
2005-02-09 05:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for USN-6-1