CVE-2004-0977: The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files

Unscored severity · published Feb 9, 2005

CVE-2004-0977

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files

–

CVSS

0.5%

EPSS

On KEV

Description

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 39% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

PostgreSQL · PostgreSQL

7.3.0 before 7.3.8; 7.4.0 before 7.4.6 · source: NVD

Enterprise Linux · Redhat

3.0; 3.0; 3.0 · source: NVD

Enterprise Linux Desktop · Redhat

3.0 · source: NVD

Mandrake Linux · Mandrakesoft

9.2; 9.2; 10.0; 10.0; 10.1; 10.1 · source: NVD

Mandrake Linux Corporate Server · Mandrakesoft

2.1; 2.1 · source: NVD

Secure Linux · Trustix

2.0; 2.1 · source: NVD

Affected product

PostgreSQL

All PostgreSQL CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2004-0977

CVE.org

https://www.cve.org/CVERecord?id=CVE-2004-0977

Issue Tracking

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300

Third Party Advisory

http://marc.info/?l=bugtraq&m=109910073808903&w=2

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200410-16.xml

Patch

http://www.debian.org/security/2004/dsa-577

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2004:149

Broken Link

http://www.redhat.com/support/errata/RHSA-2004-489.html