CVE-2006-6307 Denial of service in n/a

Medium 5.0 Published 5 Dec 2006 Updated 7 Aug 2024

Remote attackers can cause a denial of service in Novell Client for Windows by sending crafted packets to port 427, triggering invalid memory access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2006-6307?

CVE-2006-6307 is a medium-severity denial of service vulnerability in n/a, published on 5 Dec 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level (IRQL) than necessary.

Which versions are affected by CVE-2006-6307?

It affects 1 product.

Products include Novell Client.

How do I fix CVE-2006-6307?

No fix has been published for CVE-2006-6307 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2006-6307 being exploited?

There is no known exploitation of CVE-2006-6307 in the wild and no public exploit code.

Sources

Also known as GHSA-hp4h-q5hx-rgp9.