CVE-2019-10128

The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps the inherited ACL. In the default configuration, this allows a local attacker to read arbitrary data directory files, essentially...

Vulnerability in packaging (CVE-2019-10128)

EnterpriseDB Windows installer does not clear permissive ACL entries Due to both the EnterpriseDB and BigSQL Windows installers not locking down the permissions of the PostgreSQL binary installation directory and the data directory, an unprivileged Windows user account and an unprivileged...

EnterpriseDB Advanced Server 8.2 Uninitialized Pointer Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25481/info EnterpriseDB Advanced Server is prone to an uninitialized-pointer vulnerability. Authenticated attackers can exploit this issue to cause denial-of-service conditions. Given the nature of this vulnerability,...

PostgreSQL OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 PostgreSQL是一款对象关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 PostgreSQL 8.x PostgreSQL 9.x PostgreSQL 9.3.4-3, 9.2.8-3, 9.1.13-3, 9.0.17-3和8.4.21-3版本已经修复该漏洞，建议用户下载使用：...

EnterpriseDB PostgreSQL Plus Advanced Server Authentication Bypass

The DBA Management Server is a browser based Job Scheduling and monitoring environment for database monitoring, profiling, reporting, and querying with the capability of HTML and PDF report generation. An authentication bypass vulnerability has been reported in the DBA Management Server component...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

EnterpriseDB PostgreSQL Plus Advanced Server DBA Management Server Authentication Bypass

Added: 03/21/2011 BID: 46662 Background Postgres Plus Advanced Server is an enterprise database solution. It includes several productivity tools, such as Migration Studio, Postgres Studio, DBA Management Server, and DBA Monitoring Console. Problem An authentication bypass vulnerability exists in...

Moderate: Red Hat Security Advisory: EnterpriseDB security update

An updated EnterpriseDB package that fixes a security issue is now available for Red Hat eXchange. This update has been rated as having moderate security impact by the Red Hat Security Response Team. EnterpriseDB Advanced Server is a relational database management system RDBMS based on PostgreSQL...

PostgreSQL Server Detection

The remote service is a PostgreSQL database server, or a derivative such as EnterpriseDB. C Tenable Network Security, Inc. include "compat.inc"; if description scriptid26024; scriptversion"1.26"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/05"; scriptnameenglish:"PostgreS...

CVE-2007-4639

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbgcreatelistener, which allows remote authenticated users to cause a denial of service daemon crash and possibly execute arbitrary code via a SELECT statement that invokes a...

CVE-2007-4639

EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbgcreatelistener, which allows remote authenticated users to cause a denial of service daemon crash and possibly execute arbitrary code via a SELECT statement that invokes a...

CVE-2007-4639

Summary (CVE-2007-4639): EnterpriseDB Advanced Server 8.2 has a security weakness in handling certain debugging function calls that occur before a call to pldbg_create_listener. This can allow remote authenticated users to cause a denial of service (daemon crash) and potentially execute arbitrary...

PT-2007-5797 · Enterprisedb · Enterprisedb Advanced Server

Name of the Vulnerable Software and Affected Versions: EnterpriseDB Advanced Server version 8.2 Description: The issue arises from improper handling of certain debugging function calls before a call to pldbg create listener, allowing remote authenticated users to cause a denial of service daemon...

EnterpriseDB Advanced Server < 8.2.4.12 Version Detection

Binary data 4201.prm...

EnterpriseDB Advanced Server Version Detection

Binary data 4200.prm...

EnterpriseDB Advanced Server 8.2 - Uninitialized Pointer

source: https://www.securityfocus.com/bid/25481/info EnterpriseDB Advanced Server is prone to an uninitialized-pointer vulnerability. Authenticated attackers can exploit this issue to cause denial-of-service conditions. Given the nature of this vulnerability, remote code execution may also be...

EnterpriseDB Advanced Server 8.2 - Uninitialized Pointer

EnterpriseDB Advanced Server 8.2 - Uninitialized Pointer source: https://www.securityfocus.com/bid/25481/info EnterpriseDB Advanced Server is prone to an uninitialized-pointer vulnerability. Authenticated attackers can exploit this issue to cause denial-of-service conditions. Given the nature of...

EnterpriseDB Advanced Server 8.2 Unitialized Pointer

EnterpriseDB Advanced Server 8.2 Unitialized Pointer ---------------------------------------------------- Product Description: EnterpriseDB is a comercial relational database management system based on PostgreSQL. Vulnerable Versions: EnterpriseDB Advanced Server 8.2 in all supported operative...