CVE-2006-4511: Medium severity Novell GroupWise Messenger vulnerability
Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4511?
CVE-2006-4511 has a severity rating that indicates it can lead to a denial of service, potentially impacting the availability of the Novell GroupWise Messenger.
How do I fix CVE-2006-4511?
To mitigate CVE-2006-4511, it is recommended to update to a patched version of Novell GroupWise Messenger that addresses this vulnerability.
Who is affected by CVE-2006-4511?
CVE-2006-4511 specifically affects users of Novell GroupWise Messenger versions 1.0.6 and 2.0.2.
What are the symptoms of CVE-2006-4511?
The primary symptom of CVE-2006-4511 is an unexpected crash of the messenger service when it receives a specially crafted HTTP POST request.
What could exploit CVE-2006-4511?
An attacker can exploit CVE-2006-4511 by sending a modified val parameter in an HTTP POST request to the affected service running on port 8300.