CVE

CVE-2004-0977

Date: (C)2005-02-09   (M)2024-02-09

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 2.1
Exploit Score: 3.9
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Reference:

BID-11295

2004-0050

DSA-577

GLSA-200410-16

MDKSA-2004:149

OpenPKG-SA-2004.046

RHSA-2004:489

USN-6-1

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300

oval:org.mitre.oval:def:11360

script-temporary-file-overwrite(17583)