Lucene search
Ubuntu.comUB:CVE-2004-0977HistoryFeb 09, 2005 - 12:00 a.m.
CVE-2004-0977
2005-02-0900:00:00
ubuntu.com
ubuntu.com
9
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local
users to overwrite files via a symlink attack on temporary files.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | postgresql | < 7.5.16.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | postgresql | < 7.5.16.1 | UNKNOWN |
| ubuntu | 6.06 | noarch | postgresql-7.4 | < 7.4.12-3 | UNKNOWN |
| ubuntu | 6.10 | noarch | postgresql-7.4 | < 7.4.12-3 | UNKNOWN |
| ubuntu | 6.06 | noarch | postgresql-8.0 | < 8.0.7-2build1 | UNKNOWN |
| ubuntu | 6.06 | noarch | postgresql-8.1 | < 8.1.9-0ubuntu0.6.06 | UNKNOWN |
| ubuntu | 6.10 | noarch | postgresql-8.1 | < 8.1.9-0ubuntu0.6.10 | UNKNOWN |
| ubuntu | 7.04 | noarch | postgresql-8.1 | < 8.1.8-1ubuntu3 | UNKNOWN |
| ubuntu | 7.04 | noarch | postgresql-8.2 | < 8.2.4-0ubuntu0.7.04 | UNKNOWN |
Related
nessus
nessus
PostgreSQL make_oidjoins_check Arbitrary File Overwrite
2004-10-04 00:00:00
RHEL 3 : rh-postgresql (RHSA-2004:489)
2004-12-21 00:00:00
FreeBSD : postgresql-contrib -- insecure temporary file creation (153)
2004-11-23 00:00:00
openvas
openvas
Debian Security Advisory DSA 577-1 (postgresql)
2008-01-17 00:00:00
Gentoo Security Advisory GLSA 200410-16 (PostgreSQL)
2008-09-24 00:00:00
PostgreSQL insecure temporary file creation
2005-11-03 00:00:00
debian
debian
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
2004-10-29 10:20:33
osv
osv
postgresql - symlink vulnerability
2004-10-29 00:00:00
nvd
nvd
CVE-2004-0977
2005-02-09 05:00:00
gentoo
gentoo
PostgreSQL: Insecure temporary file use in make_oidjoins_check
2004-10-18 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)
2004-10-30 00:00:00
postgresql
postgresql
Vulnerability in client contrib module (CVE-2004-0977)
2005-02-09 05:00:00
redhat
redhat
(RHSA-2004:489) rh-postgresql security update
2004-12-20 00:00:00
cvelist
cvelist
CVE-2004-0977
2004-10-20 04:00:00
freebsd
freebsd
postgresql-contrib -- insecure temporary file creation
2004-09-10 00:00:00
cve
cve
CVE-2004-0977
2005-02-09 05:00:00
ubuntu
ubuntu
postgresql contributed script vulnerability
2004-10-27 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2004-0977