Denial of Service Vulnerability in EnterpriseDB Advanced Server 8.2

CVE-2007-4639

What is CVE-2007-4639?

The EnterpriseDB Advanced Server 8.2 contains a vulnerability that arises from improper handling of certain debugging function calls, particularly those made before invoking pldbg_create_listener. This flaw permits remote authenticated users to trigger a denial of service scenario by causing the server daemon to crash. Additionally, the exploitation of this vulnerability could lead to arbitrary code execution by leveraging a SELECT statement that calls specific pldbg_ functions, such as pldbg_get_stack and pldbg_abort_target. These functions may result in the use of uninitialized pointers, creating risk for affected systems.

References