CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2013-1902

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0350%
EPSS Percentile40.40th
Published2013年4月4日
Last Modified2026年4月29日

Vulnerability Description

PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."

Affected Platforms (CPE)

📦
Postgresql

Postgresql

= 9.2
📦
Postgresql

Postgresql

= 9.2.1
📦
Postgresql

Postgresql

= 9.2.2
📦
Postgresql

Postgresql

= 9.2.3
📦
Postgresql

Postgresql

= 9.1
📦
Postgresql

Postgresql

= 9.1.1
📦
Postgresql

Postgresql

= 9.1.2
📦
Postgresql

Postgresql

= 9.1.3
📦
Postgresql

Postgresql

= 9.1.4
📦
Postgresql

Postgresql

= 9.1.5
📦
Postgresql

Postgresql

= 9.1.6
📦
Postgresql

Postgresql

= 9.1.7
📦
Postgresql

Postgresql

= 9.1.8
📦
Postgresql

Postgresql

= 9.0
📦
Postgresql

Postgresql

= 9.0.1
📦
Postgresql

Postgresql

= 9.0.2
📦
Postgresql

Postgresql

= 9.0.3
📦
Postgresql

Postgresql

= 9.0.4
📦
Postgresql

Postgresql

= 9.0.5
📦
Postgresql

Postgresql

= 9.0.6
📦
Postgresql

Postgresql

= 9.0.7
📦
Postgresql

Postgresql

= 9.0.8
📦
Postgresql

Postgresql

= 9.0.9
📦
Postgresql

Postgresql

= 9.0.10
📦
Postgresql

Postgresql

= 9.0.11
📦
Postgresql

Postgresql

= 9.0.12
📦
Postgresql

Postgresql

= 8.4
📦
Postgresql

Postgresql

= 8.4.1
📦
Postgresql

Postgresql

= 8.4.2
📦
Postgresql

Postgresql

= 8.4.3
📦
Postgresql

Postgresql

= 8.4.4
📦
Postgresql

Postgresql

= 8.4.5
📦
Postgresql

Postgresql

= 8.4.6
📦
Postgresql

Postgresql

= 8.4.7
📦
Postgresql

Postgresql

= 8.4.8
📦
Postgresql

Postgresql

= 8.4.9
📦
Postgresql

Postgresql

= 8.4.10
📦
Postgresql

Postgresql

= 8.4.11
📦
Postgresql

Postgresql

= 8.4.12
📦
Postgresql

Postgresql

= 8.4.13
📦
Postgresql

Postgresql

= 8.4.14
📦
Postgresql

Postgresql

= 8.4.15
📦
Postgresql

Postgresql

= 8.4.16
📦
Postgresql

Postgresql

= 8.3
📦
Postgresql

Postgresql

= 8.3.1
📦
Postgresql

Postgresql

= 8.3.2
📦
Postgresql

Postgresql

= 8.3.3
📦
Postgresql

Postgresql

= 8.3.4
📦
Postgresql

Postgresql

= 8.3.5
📦
Postgresql

Postgresql

= 8.3.6
📦
Postgresql

Postgresql

= 8.3.7
📦
Postgresql

Postgresql

= 8.3.8
📦
Postgresql

Postgresql

= 8.3.9
📦
Postgresql

Postgresql

= 8.3.10
📦
Postgresql

Postgresql

= 8.3.11
📦
Postgresql

Postgresql

= 8.3.12
📦
Postgresql

Postgresql

= 8.3.13
📦
Postgresql

Postgresql

= 8.3.14
📦
Postgresql

Postgresql

= 8.3.15
📦
Postgresql

Postgresql

= 8.3.16
📦
Postgresql

Postgresql

= 8.3.17
📦
Postgresql

Postgresql

= 8.3.18
📦
Postgresql

Postgresql

= 8.3.19
📦
Postgresql

Postgresql

= 8.3.20
📦
Postgresql

Postgresql

= 8.3.21
📦
Postgresql

Postgresql

= 8.3.22

References & Advisories

🔗 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
🔗 http://www.postgresql.org/about/news/1456/
🔗 http://www.postgresql.org/support/security/
🔗 http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
🔗 http://www.postgresql.org/about/news/1456/
🔗 http://www.postgresql.org/support/security/

相關漏洞威脅

CVE-2003-050010.0

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote a...

CVE-2005-365610.0

Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authentication agai...

CVE-2002-139910.0

Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before...

CVE-2007-327910.0

PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgsql privileg...