CVE-2008-2704: Novell Groupwise Messenger

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries.

Affected products

• Novell Groupwise Messenger: version 1.0.6 only; version 2.0 only; version 2.0.2 only; version 2.0.3 only

Published 2008-06-13. Last modified 2026-06-16.