FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

postgresql-contrib -- insecure temporary file creation

Affected packages
		postgresql-contrib	<	7.2.6
7.3.*	<	postgresql-contrib	<	7.3.8
7.4.*	<	postgresql-contrib	<	7.4.6

Details

VuXML ID	6a164d84-2f7f-11d9-a9e7-0001020eed82
Discovery	2004-09-10
Entry	2004-11-06

The make_oidjoins_check script in the PostgreSQL RDBMS has insecure handling of temporary files, which could lead to an attacker overwriting arbitrary files with the credentials of the user running the make_oidjoins_check script.

References

Bugtraq ID	11295
CVE Name	CVE-2004-0977
URL	http://www.postgresql.org/news/234.html
URL	http://www.trustix.net/errata/2004/0050/