← Vulnerability feed

Vulnerability record · CVE-2006-4511 · published 5 October 2006

CVE-2006-4511: Novell groupwise messenger vulnerability

Novell · Groupwise Messenger

Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."

5.0 CVSS 2.0 Medium EPSS 3.0% · top 13.2%
5.0CVSS 2.0 base score
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References
16 Jun 2026Last modified by NVD

Description

Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/22244 PatchVendor Advisory
http://securitytracker.com/id?1016974
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974452.htm Patch
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/796956 US Government Resource
http://www.securityfocus.com/bid/20316 Patch
http://www.vupen.com/english/advisories/2006/3893
https://exchange.xforce.ibmcloud.com/vulnerabilities/29319
http://secunia.com/advisories/22244 PatchVendor Advisory
http://securitytracker.com/id?1016974
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974452.htm Patch
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416 PatchVendor Advisory
http://www.kb.cert.org/vuls/id/796956 US Government Resource
http://www.securityfocus.com/bid/20316 Patch
http://www.vupen.com/english/advisories/2006/3893
https://exchange.xforce.ibmcloud.com/vulnerabilities/29319

Track CVE-2006-4511 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-2703Novell GroupWise Messenger Client stack buffer overflow via spoofed server responsesThe Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows contains multiple stack-based buffer overflows. A remote attacker can trigg…EPSS 61%analysed10.0CVE-2006-0992Novell GroupWise Messenger Accept-Language stack buffer overflowNovell GroupWise Messenger before 2.0 Public Beta 2 contains a stack-based buffer overflow triggered by a long Accept-Language value that lacks a com…EPSS 73%analysed9.3CVE-2013-1085Novell groupwise messenger memory buffer overflow vulnerabilityStack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before …EPSS 5.6%5.0CVE-2011-3179Novell groupwise messenger information exposure vulnerabilityThe server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read f…EPSS 1.2%5.0CVE-2008-2704Novell groupwise messenger improper input validation vulnerabilityNovell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly …EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2006-4511), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.