CVE-2006-0992
CVE-2006-0992 is a critical-severity vulnerability in Novell Groupwise Messenger with a CVSS 2.0 base score of 10.0. Its EPSS exploit-prediction score of 73% places it in the 99th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 73% (99th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Novell Groupwise Messenger
- Published:
- Last modified:
Description
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the correct identifier.
Frequently asked questions
- What is CVE-2006-0992?
- Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the correct identifier.
- How severe is CVE-2006-0992?
- CVE-2006-0992 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2006-0992 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 73% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-0992?
- CVE-2006-0992 affects Novell Groupwise Messenger. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2006-0992?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2006-0992 published?
- CVE-2006-0992 was published on 2006-04-14 and last updated on 2026-06-16.
References
- http://cirt.dk/advisories/cirt-42-advisory.txt
- http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html
- http://secunia.com/advisories/19663
- http://securitytracker.com/id?1015911
- http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm
- http://www.osvdb.org/24617
- http://www.securityfocus.com/archive/1/430911/100/0/threaded
- http://www.securityfocus.com/bid/17503
- http://www.vupen.com/english/advisories/2006/1355
- http://www.zerodayinitiative.com/advisories/ZDI-06-008.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25828
- https://www.exploit-db.com/exploits/1679
Affected products (1)
- cpe:2.3:a:novell:groupwise_messenger:2.0:*:*:*:*:*:*:*
More vulnerabilities in Novell Groupwise Messenger
- CVE-2008-2703 — Critical (CVSS 10.0): Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow…
- CVE-2013-1085 — Critical (CVSS 9.3): Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell…
- CVE-2011-3179 — Medium (CVSS 5.0): The server process in Novell Messenger 2.1 and 2.2.x before 2.2.1, and Novell GroupWise Messenger 2.04 and earlier,…
- CVE-2008-2704 — Medium (CVSS 5.0): Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash)…
- CVE-2006-4511 — Medium (CVSS 5.0): Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service…