CVE-2013-1902 PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecifi...
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | = 9.2 | No fix listed |
| postgresql | = 9.2.1 | No fix listed |
| postgresql | = 9.2.2 | No fix listed |
| postgresql | = 9.2.3 | No fix listed |
| postgresql | = 9.1 | No fix listed |
| postgresql | = 9.1.1 | No fix listed |
| postgresql | = 9.1.2 | No fix listed |
| postgresql | = 9.1.3 | No fix listed |
| postgresql | = 9.1.4 | No fix listed |
| postgresql | = 9.1.5 | No fix listed |
| postgresql | = 9.1.6 | No fix listed |
| postgresql | = 9.1.7 | No fix listed |
| postgresql | = 9.1.8 | No fix listed |
| postgresql | = 9.0 | No fix listed |
| postgresql | = 9.0.1 | No fix listed |
| postgresql | = 9.0.2 | No fix listed |
| postgresql | = 9.0.3 | No fix listed |
| postgresql | = 9.0.4 | No fix listed |
| postgresql | = 9.0.5 | No fix listed |
| postgresql | = 9.0.6 | No fix listed |
| postgresql | = 9.0.7 | No fix listed |
| postgresql | = 9.0.8 | No fix listed |
| postgresql | = 9.0.9 | No fix listed |
| postgresql | = 9.0.10 | No fix listed |
| postgresql | = 9.0.11 | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | = 9.0.12 | No fix listed |
| postgresql | = 8.4 | No fix listed |
| postgresql | = 8.4.1 | No fix listed |
| postgresql | = 8.4.2 | No fix listed |
| postgresql | = 8.4.3 | No fix listed |
| postgresql | = 8.4.4 | No fix listed |
| postgresql | = 8.4.5 | No fix listed |
| postgresql | = 8.4.6 | No fix listed |
| postgresql | = 8.4.7 | No fix listed |
| postgresql | = 8.4.8 | No fix listed |
| postgresql | = 8.4.9 | No fix listed |
| postgresql | = 8.4.10 | No fix listed |
| postgresql | = 8.4.11 | No fix listed |
| postgresql | = 8.4.12 | No fix listed |
| postgresql | = 8.4.13 | No fix listed |
| postgresql | = 8.4.14 | No fix listed |
| postgresql | = 8.4.15 | No fix listed |
| postgresql | = 8.4.16 | No fix listed |
| postgresql | = 8.3 | No fix listed |
| postgresql | = 8.3.1 | No fix listed |
| postgresql | = 8.3.2 | No fix listed |
| postgresql | = 8.3.3 | No fix listed |
| postgresql | = 8.3.4 | No fix listed |
| postgresql | = 8.3.5 | No fix listed |
| postgresql | = 8.3.6 | No fix listed |
| postgresql | = 8.3.7 | No fix listed |
| postgresql | = 8.3.8 | No fix listed |
| postgresql | = 8.3.9 | No fix listed |
| postgresql | = 8.3.10 | No fix listed |
| postgresql | = 8.3.11 | No fix listed |
| postgresql | = 8.3.12 | No fix listed |
| postgresql | = 8.3.13 | No fix listed |
| postgresql | = 8.3.14 | No fix listed |
| postgresql | = 8.3.15 | No fix listed |
| postgresql | = 8.3.16 | No fix listed |
| postgresql | = 8.3.17 | No fix listed |
| postgresql | = 8.3.18 | No fix listed |
| postgresql | = 8.3.19 | No fix listed |
| postgresql | = 8.3.20 | No fix listed |
| postgresql | = 8.3.21 | No fix listed |
| postgresql | = 8.3.22 | No fix listed |
References
- www.oracle.com
- www.postgresql.org vendor-advisory
- www.postgresql.org vendor-advisory