CVE-2013-1902: Critical severity postgresql common vulnerability

Published Apr 4, 2013

Updated

PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."

Affected Software

66 affected components

PostgreSQL postgresql=9.2

PostgreSQL postgresql=9.2.1

PostgreSQL postgresql=9.2.2

PostgreSQL postgresql=9.2.3

PostgreSQL postgresql=9.1

PostgreSQL postgresql=9.1.1

PostgreSQL postgresql=9.1.2

PostgreSQL postgresql=9.1.3

PostgreSQL postgresql=9.1.4

PostgreSQL postgresql=9.1.5

PostgreSQL postgresql=9.1.6

PostgreSQL postgresql=9.1.7

PostgreSQL postgresql=9.1.8

PostgreSQL postgresql=9.0

PostgreSQL postgresql=9.0.1

PostgreSQL postgresql=9.0.2

PostgreSQL postgresql=9.0.3

PostgreSQL postgresql=9.0.4

PostgreSQL postgresql=9.0.5

PostgreSQL postgresql=9.0.6

PostgreSQL postgresql=9.0.7

PostgreSQL postgresql=9.0.8

PostgreSQL postgresql=9.0.9

PostgreSQL postgresql=9.0.10

PostgreSQL postgresql=9.0.11

PostgreSQL postgresql=9.0.12

PostgreSQL postgresql=8.4

PostgreSQL postgresql=8.4.1

PostgreSQL postgresql=8.4.2

PostgreSQL postgresql=8.4.3

PostgreSQL postgresql=8.4.4

PostgreSQL postgresql=8.4.5

PostgreSQL postgresql=8.4.6

PostgreSQL postgresql=8.4.7

PostgreSQL postgresql=8.4.8

PostgreSQL postgresql=8.4.9

PostgreSQL postgresql=8.4.10

PostgreSQL postgresql=8.4.11

PostgreSQL postgresql=8.4.12

PostgreSQL postgresql=8.4.13

PostgreSQL postgresql=8.4.14

PostgreSQL postgresql=8.4.15

PostgreSQL postgresql=8.4.16

PostgreSQL postgresql=8.3

PostgreSQL postgresql=8.3.1

PostgreSQL postgresql=8.3.2

PostgreSQL postgresql=8.3.3

PostgreSQL postgresql=8.3.4

PostgreSQL postgresql=8.3.5

PostgreSQL postgresql=8.3.6

PostgreSQL postgresql=8.3.7

PostgreSQL postgresql=8.3.8

PostgreSQL postgresql=8.3.9

PostgreSQL postgresql=8.3.10

PostgreSQL postgresql=8.3.11

PostgreSQL postgresql=8.3.12

PostgreSQL postgresql=8.3.13

PostgreSQL postgresql=8.3.14

PostgreSQL postgresql=8.3.15

PostgreSQL postgresql=8.3.16

PostgreSQL postgresql=8.3.17

PostgreSQL postgresql=8.3.18

PostgreSQL postgresql=8.3.19

PostgreSQL postgresql=8.3.20

PostgreSQL postgresql=8.3.21

PostgreSQL postgresql=8.3.22

Event History

Apr 4, 2013

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1902?

CVE-2013-1902 is considered to have an unspecified severity level due to its impact on insecure temporary file generation.

How do I fix CVE-2013-1902?

To fix CVE-2013-1902, upgrade your PostgreSQL installation to a version that is 9.2.4 or later, 9.1.9 or later, 9.0.13 or later, 8.4.17 or later, or 8.3.23 or later.

What versions of PostgreSQL are affected by CVE-2013-1902?

CVE-2013-1902 affects PostgreSQL versions 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23.

What impact does CVE-2013-1902 have on users?

CVE-2013-1902 may lead to potential exploitation through insecure temporary files, particularly affecting graphical installers for Linux and Mac OS X.

Is CVE-2013-1902 related to data exposure or loss?

While the exact attack vectors of CVE-2013-1902 are unspecified, the vulnerability could potentially lead to data exposure due to predictable temporary filenames.