CVE-2004-0977

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300Issue Tracking
http://marc.info/?l=bugtraq&m=109910073808903&w=2Third Party Advisory
http://security.gentoo.org/glsa/glsa-200410-16.xmlThird Party Advisory
http://www.debian.org/security/2004/dsa-577Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:149Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-489.htmlBroken Link
http://www.securityfocus.com/bid/11295Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.trustix.org/errata/2004/0050Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17583Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360Broken Link
https://www.ubuntu.com/usn/usn-6-1/Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300Issue Tracking
http://marc.info/?l=bugtraq&m=109910073808903&w=2Third Party Advisory
http://security.gentoo.org/glsa/glsa-200410-16.xmlThird Party Advisory
http://www.debian.org/security/2004/dsa-577Patch, Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:149Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2004-489.htmlBroken Link
http://www.securityfocus.com/bid/11295Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://www.trustix.org/errata/2004/0050Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17583Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11360Broken Link
https://www.ubuntu.com/usn/usn-6-1/Third Party Advisory

Timeline

Published: Feb 9, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-097810.0Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online CVE-2004-09794.6Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disab CVE-2004-098010.0Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types CVE-2004-098110.0Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain imag CVE-2004-098210.0Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users CVE-2004-09835.0The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU c CVE-2004-09847.2Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.CVE-2004-098510.0Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable CVE-2004-09867.5Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall r CVE-2004-098710.0Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.CVE-2004-09885.0Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (mem CVE-2004-098910.0Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrar