Approved changes feed: RSS · Atom

cpe:2.3:a:novell:groupwise_messenger:1.0.6:*:*:*:*:*:*:*

part: a version: 1.0.6 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductGroupwise Messenger (f13d68fd-2c82-51f5-adb4-942c842144f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1085 vulnerable 2026-06-08 05:03:52.378932 Details available
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
Published: 2013-03-29T10:00:00.000Z
Updated: 2024-09-17T01:11:10.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3179 vulnerable 2026-06-08 04:58:10.922269 Details available
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command.
Published: 2011-12-08T11:00:00.000Z
Updated: 2024-09-16T19:24:47.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2704 vulnerable 2026-06-08 04:50:31.623545 Details available
Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries.
Published: 2008-06-13T19:19:00.000Z
Updated: 2024-08-07T09:14:14.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4511 vulnerable 2026-06-08 04:49:18.072977 Details available
Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."
Published: 2006-10-04T01:00:00.000Z
Updated: 2024-08-07T19:14:47.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.