The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 7.3.0 (including) | 7.3.8 (excluding) |
| Postgresql | Postgresql | 7.4.0 (including) | 7.4.6 (excluding) |
| Postgresql | Ubuntu | dapper | * |
| Postgresql | Ubuntu | edgy | * |
| Postgresql-7.4 | Ubuntu | dapper | * |
| Postgresql-7.4 | Ubuntu | edgy | * |
| Postgresql-8.0 | Ubuntu | dapper | * |
| Postgresql-8.1 | Ubuntu | dapper | * |
| Postgresql-8.1 | Ubuntu | devel | * |
| Postgresql-8.1 | Ubuntu | edgy | * |
| Postgresql-8.1 | Ubuntu | feisty | * |
| Postgresql-8.2 | Ubuntu | devel | * |
| Postgresql-8.2 | Ubuntu | feisty | * |
| Red Hat Enterprise Linux 3 | RedHat | rh-postgresql-0:7.3.8-2 | * |