CVE-2007-4639 Null dereference in n/a

Medium 6.5 Published 31 Aug 2007 Updated 7 Aug 2024

Authenticated users can crash the database daemon or potentially execute code by invoking specific debugging functions before initialization.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2007-4639?

CVE-2007-4639 is a medium-severity vulnerability in n/a, published on 31 Aug 2007. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg_create_listener, which allows remote authenticated users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a SELECT statement that invokes a pldbg_ function, as demonstrated by (1) pldbg_get_stack and (2) pldbg_abort_target, which triggers use of an uninitialized pointer.

Weakness: CWE-824

Which versions are affected by CVE-2007-4639?

It affects 1 product.

Linux distribution packages (1)

EnterpriseDB Red Hat:rhx_enterprisedb_advanced_server:7.2 All versions 0:8.1.9.27-1

Products include Enterprisedb Postgres Advanced Server.

How do I fix CVE-2007-4639?

Apply the vendor's patch.

Is CVE-2007-4639 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2007-4639 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-f4fh-29cp-vmcg, RHSA-2007:0895.