CVE-2006-2304: Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91...

Security readout for executives and security teams

This is a legacy Novell Client flaw that could let a remote attacker run code on systems using affected NDPS/DPRPC components. The issue is an integer overflow in DPRPCW32.DLL when handling oversized XDR array data. Business risk is concentrated in old environments still running Novell Client 4.83 SP3, 4.90 SP2, or 4.91 SP2. Likely exposure is limited to legacy Windows endpoints or operational environments still running the named Novell Client versions with NDPS/DPRPC functionality present. Modern environments without Novell Client or NDPS dependencies are unlikely to be exposed based on the supplied sources. Prioritize this where legacy Novell Client remains in production, especially on business-critical or broadly reachable systems. If no affected Novell Client versions exist, the business priority is low. The main urgency is reducing remote code execution risk in old, often poorly monitored infrastructure. Mitigation focus: Inventory endpoints for Novell Client 4.83 SP3, 4.90 SP2, and 4.91 SP2.; Check Novell support guidance for fixed versions or vendor-approved remediation.; Remove or disable unused Novell Client and NDPS components where operationally feasible..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.