CVEvulnerability
CVE-2004-0977
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Affected configurations
• postgresql postgresql (>= 7.3.0 < 7.3.8)
• postgresql postgresql (>= 7.4.0 < 7.4.6)
• mandrakesoft mandrake linux 9.2
• mandrakesoft mandrake linux 10.0
• mandrakesoft mandrake linux 10.1
• mandrakesoft mandrake linux corporate server 2.1
• redhat enterprise linux 3.0
• redhat enterprise linux desktop 3.0
• trustix secure linux 2.0
• trustix secure linux 2.1
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300 Issue Tracking
- http://marc.info/?l=bugtraq&m=109910073808903&w=2 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200410-16.xml Third Party Advisory
- http://www.debian.org/security/2004/dsa-577 Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:149 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2004-489.html Broken Link
- http://www.securityfocus.com/bid/11295 Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360 Broken Link
- https://www.ubuntu.com/usn/usn-6-1/ Third Party Advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300 Issue Tracking
- http://marc.info/?l=bugtraq&m=109910073808903&w=2 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200410-16.xml Third Party Advisory
- http://www.debian.org/security/2004/dsa-577 Patch, Vendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:149 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2004-489.html Broken Link
- http://www.securityfocus.com/bid/11295 Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360 Broken Link
- https://www.ubuntu.com/usn/usn-6-1/ Third Party Advisory