CVE-2006-4511: Novell Groupwise Messenger

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."

Affected products

• Novell Groupwise Messenger: version 1.0.6 only; version 2.0.2 only

Published 2006-10-05. Last modified 2026-06-16.