Every CVESearch/Get API key

CVE-2004-0977

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite...

2.1 LowFix available

CVE-2004-0977 is a low vulnerability (CVSS 2.1) in Postgresql, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in postgresql 7.2.1-2woody6.

Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.45%EPSS, 39th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
7.2.1-2woody6postgresql +48 more

Description

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Exploit likelihood

0.45%Down 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql
Debian:3.0
before 7.2.1-2woody6
7.2.1-2woody6
rh-postgresql
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-contrib
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-devel
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-docs
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-libs
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-pl
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-python
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
Show 39 moreShow less
Affected packages
PackageAffectedFixed
rh-postgresql-server
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-tcl
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-test
Red Hat:enterprise_linux:3::as
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-contrib
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-devel
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-docs
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-libs
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-pl
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-python
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-server
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-tcl
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-test
Red Hat:enterprise_linux:3::desktop
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-contrib
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-devel
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-docs
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-libs
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-pl
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-python
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-server
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-tcl
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-test
Red Hat:enterprise_linux:3::es
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-contrib
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-devel
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-docs
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-jdbc
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-libs
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-pl
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-python
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-server
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-tcl
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2
rh-postgresql-test
Red Hat:enterprise_linux:3::ws
before 0:7.3.8-2
0:7.3.8-2

What each source reports

NVD Score used2.1

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Record
CVE-2004-0977
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Record
CVE-2004-0977
Updated
2026-11-02
EUVDEUVD-2004-0975No score

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Record
EUVD-2004-0975
Updated
2026-11-03
GitHub AdvisoriesGHSA-6j7m-4j6m-84cwNo score

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite...

The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

Record
GHSA-6j7m-4j6m-84cw
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 18 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open