CVE-2018-1053 — Insecure Temporary File in Postgresql

CWE-377 — Insecure Temporary FileCWE-732 — Incorrect Permission Assignment13 documents8 sources
Severity
7.0HIGHNVD
EPSS
0.1%
top 75.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
PostgresqlTHE Postgresql Global Development Group PostgresqlCanonical Ubuntu Linux+2 more
Timeline
PublishedFeb 9
Latest updateMay 13

Description

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is inf…

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages4 packages

▶NVDpostgresql/postgresql9.3.0 — 9.3.21+5
▶Alpinepostgresql/postgresql< 10.2-r0+10

Also affects: Debian Linux 7.0, Ubuntu Linux 14.04, 16.04, 17.10

Patches

Patch: www.postgresql.org ↗Patch: www.postgresql.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-h73g-3m4r-j2cr: In postgresql 9↗2022-05-13
▶
CVEList
CVE-2018-1053: In postgresql 9↗2018-02-09
▶
OSV
CVE-2018-1053: In postgresql 9↗2018-02-09
▶

💥Exploits & PoCs

1
Exploit-DB
Skia and Firefox - Integer Overflow in SkTDArray Leading to Out-of-Bounds Write↗2018-05-25
▶

📋Vendor Advisories

2
Ubuntu
PostgreSQL vulnerability↗2018-02-09
▶
Red Hat
postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask↗2018-02-08
▶

💬Community

6
Bugzilla
CVE-2018-10804 ImageMagick: Memory leak in WriteTIFFImage↗2018-05-11
▶
Bugzilla
CVE-2018-1053 mingw-postgresql: postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask [fedora-all]↗2018-02-09
▶
Bugzilla
CVE-2018-1053 mingw-postgresql: postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask [epel-7]↗2018-02-09
▶
Bugzilla
CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask [fedora-all]↗2018-02-09
▶
Bugzilla
CVE-2018-1053 postgresql: pg_upgrade creates file of sensitive metadata under prevailing umask↗2018-01-29
▶
CVE-2018-1053 — Insecure Temporary File in Postgresql | cvebase