FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0977

This CVE name corresponds to:

Entered	Topic
2004-11-06	postgresql-contrib -- insecure temporary file creation

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0977 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0977
Phase	Assigned(20041019)

Description

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

References

Source	Reference
DEBIAN	DSA-577
GENTOO	GLSA-200410-16
MANDRAKE	MDKSA-2004:149
REDHAT	RHSA-2004:489
TRUSTIX	2004-0050
UBUNTU	USN-6-1
OPENPKG	OpenPKG-SA-2004.046
CONFIRM	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300
BID	11295
OVAL	oval:org.mitre.oval:def:11360
XF	script-temporary-file-overwrite(17583)