CyberSec.Space Logo
Back to CVE Browser

CVE-2013-1902

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0350%
EPSS Percentile40.40th
PublishedApr 4, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."

Affected Platforms (CPE)

📦
Postgresql

Postgresql

= 9.2
📦
Postgresql

Postgresql

= 9.2.1
📦
Postgresql

Postgresql

= 9.2.2
📦
Postgresql

Postgresql

= 9.2.3
📦
Postgresql

Postgresql

= 9.1
📦
Postgresql

Postgresql

= 9.1.1
📦
Postgresql

Postgresql

= 9.1.2
📦
Postgresql

Postgresql

= 9.1.3
📦
Postgresql

Postgresql

= 9.1.4
📦
Postgresql

Postgresql

= 9.1.5
📦
Postgresql

Postgresql

= 9.1.6
📦
Postgresql

Postgresql

= 9.1.7
📦
Postgresql

Postgresql

= 9.1.8
📦
Postgresql

Postgresql

= 9.0
📦
Postgresql

Postgresql

= 9.0.1
📦
Postgresql

Postgresql

= 9.0.2
📦
Postgresql

Postgresql

= 9.0.3
📦
Postgresql

Postgresql

= 9.0.4
📦
Postgresql

Postgresql

= 9.0.5
📦
Postgresql

Postgresql

= 9.0.6
📦
Postgresql

Postgresql

= 9.0.7
📦
Postgresql

Postgresql

= 9.0.8
📦
Postgresql

Postgresql

= 9.0.9
📦
Postgresql

Postgresql

= 9.0.10
📦
Postgresql

Postgresql

= 9.0.11
📦
Postgresql

Postgresql

= 9.0.12
📦
Postgresql

Postgresql

= 8.4
📦
Postgresql

Postgresql

= 8.4.1
📦
Postgresql

Postgresql

= 8.4.2
📦
Postgresql

Postgresql

= 8.4.3
📦
Postgresql

Postgresql

= 8.4.4
📦
Postgresql

Postgresql

= 8.4.5
📦
Postgresql

Postgresql

= 8.4.6
📦
Postgresql

Postgresql

= 8.4.7
📦
Postgresql

Postgresql

= 8.4.8
📦
Postgresql

Postgresql

= 8.4.9
📦
Postgresql

Postgresql

= 8.4.10
📦
Postgresql

Postgresql

= 8.4.11
📦
Postgresql

Postgresql

= 8.4.12
📦
Postgresql

Postgresql

= 8.4.13
📦
Postgresql

Postgresql

= 8.4.14
📦
Postgresql

Postgresql

= 8.4.15
📦
Postgresql

Postgresql

= 8.4.16
📦
Postgresql

Postgresql

= 8.3
📦
Postgresql

Postgresql

= 8.3.1
📦
Postgresql

Postgresql

= 8.3.2
📦
Postgresql

Postgresql

= 8.3.3
📦
Postgresql

Postgresql

= 8.3.4
📦
Postgresql

Postgresql

= 8.3.5
📦
Postgresql

Postgresql

= 8.3.6
📦
Postgresql

Postgresql

= 8.3.7
📦
Postgresql

Postgresql

= 8.3.8
📦
Postgresql

Postgresql

= 8.3.9
📦
Postgresql

Postgresql

= 8.3.10
📦
Postgresql

Postgresql

= 8.3.11
📦
Postgresql

Postgresql

= 8.3.12
📦
Postgresql

Postgresql

= 8.3.13
📦
Postgresql

Postgresql

= 8.3.14
📦
Postgresql

Postgresql

= 8.3.15
📦
Postgresql

Postgresql

= 8.3.16
📦
Postgresql

Postgresql

= 8.3.17
📦
Postgresql

Postgresql

= 8.3.18
📦
Postgresql

Postgresql

= 8.3.19
📦
Postgresql

Postgresql

= 8.3.20
📦
Postgresql

Postgresql

= 8.3.21
📦
Postgresql

Postgresql

= 8.3.22

References & Advisories

🔗 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
🔗 http://www.postgresql.org/about/news/1456/
🔗 http://www.postgresql.org/support/security/
🔗 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
🔗 http://www.postgresql.org/about/news/1456/
🔗 http://www.postgresql.org/support/security/

Related Vulnerabilities

CVE-2003-050010.0

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote a...

CVE-2005-365610.0

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication agai...

CVE-2002-139910.0

Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before...

CVE-2007-327910.0

PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileg...