CVE-2011-3179: Novell Groupwise Messenger

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command.

Affected products

• Novell Groupwise Messenger: up to and including 2.0.4; version 1.0.6 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only
• Novell Messenger: version 2.1 only; version 2.2.0 only

Published 2011-12-08. Last modified 2026-06-16.