What is CVE-2013-1902?

CVE-2013-1902 is a vulnerability in Postgresql. Published 2013-04-04.

Is CVE-2013-1902 known to be exploited?

15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Postgresql

CVE-2013-1902

PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

Postgresql — versions 9.2, 9.2.1, 9.2.2
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cvemon
CoolerVoid/Vision
CoolerVoid/Vision2
DButter/whitehat_
Dokukin1/Metasploitable
Furious992/HW13-01
Iknowmyname/Nmap-Scans-M2
NikulinMS/13-01-hw
Zhivarev/13-01-hw
hack-parthsharma/Vision

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2013-1902?: CVE-2013-1902 is a vulnerability in Postgresql. Published 2013-04-04.
Is CVE-2013-1902 known to be exploited?: 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.