Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2.x before 2.2.2, allows remote attackers to execute arbitrary code via an import command containing a long string in the filename parameter.
Max CVSS
9.3
EPSS Score
27.69%
Published
2013-03-29
Updated
2013-03-29
The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier, allows remote attackers to read from arbitrary memory locations via a crafted command.
Max CVSS
5.0
EPSS Score
25.13%
Published
2011-12-08
Updated
2012-03-05
2 vulnerabilities found