CVE-2004-0977
Fixed in a distro release EPSS <1%
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Products: postgresql, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat enterprise_linux, redhat enterprise_linux_desktop, trustix secure_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | postgresql | 7.2.1-2woody6 |
| Red Hat Enterprise Linux 3 | rh-postgresql | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-contrib | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-debuginfo | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-devel | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-docs | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-jdbc | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-libs | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-pl | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-python | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-server | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-tcl | 0:7.3.8-2 |
| Red Hat Enterprise Linux 3 | rh-postgresql-test | 0:7.3.8-2 |