Vulnerabilities > CVE-2006-4511 - Denial of Service vulnerability in Novell GroupWise Messenger Server Nmma.EXE

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
novell
NVD
Published: 2006-10-05
Updated: 2017-07-20

Summary

Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."

Vulnerable Configurations

Part Description Count
Application
Novell
2

References