CVE-2007-4639: Enterprisedb Postgres Advanced Server

Medium severity, CVSS 6.5. EPSS: 5.1% chance of exploitation in the next 30 days.

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.

Affected products

• Enterprisedb Postgres Advanced Server: version 8.2 only

Published 2007-08-31. Last modified 2026-06-16.