Unscored severity · published Dec 8, 2011
CVE-2011-3179
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GM
Groupwise Messenger · Novell
through 2.0.4; 1.0.6; 2.0; 2.0.1; 2.0.2; 2.0.3 · source: NVD
ME
Messenger · Novell
2.1; 2.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3179
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3179
Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=7009634
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=712158
More from Groupwise Messenger
–
CVE-2013-1085
Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers…
–
CVE-2008-2703
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow remote attackers to execute arbitrary code via "spoofed server…
–
CVE-2008-2704
Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID, possibly involving a popup alert
–
CVE-2006-4511
Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with…
–
CVE-2006-0992
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a…