TI-2006-06071 Aliases CVE-2006-6307 GHSA-hp4h-q5hx-rgp9

srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause…

LOW 27Published 2006-12-05 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level (IRQL) than necessary.

Why it matters now

EPSS 0.01953 80th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:novell:client:4.91:sp2::::::	4.91 sp2	Vulnerable	Novell

cpe:2.3:a:novell:client:4.91:sp2:*:*:*:*:*:* Versions 4.91 sp2 Vulnerable ·Novell

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2006-6307
2026-10-03 Alias added: GHSA-hp4h-q5hx-rgp9

References

Patch 1

https://secure-support.novell.com/KanisaPlatform/Publishing/859/3480790_f.SAL_Public.html

Other 1

ADV-2006-4840

TI-2008-00608 Stack-based buffer overflow in the EnumPrinters function in the Spooler service… CVSS 2.0HIGH 10.0
TI-2007-02860 Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell… CVSS 2.0HIGH 10.0
TI-2006-02244 Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3… CVSS 2.0HIGH 10.0
TI-2007-06396 Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell… CVSS 2.0HIGH 10.0
TI-2006-06190 Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for… CVSS 2.0HIGH 10.0
TI-2000-00790 Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the… CVSS 2.0HIGH 10.0

See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences