CVE-2006-6307: srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified den...

Security readout for executives and security teams

CVE-2006-6307 is a remote denial-of-service issue in Novell Client for Windows before 4.91 SP3. A crafted packet sent to port 427 can trigger a kernel driver fault in srvloc.sys, potentially crashing affected systems or disrupting service availability. Exposure is most likely on legacy Windows endpoints or servers running Novell Client for Windows earlier than 4.91 SP3 with port 427 reachable from untrusted or broad internal networks. Treat this as a legacy availability risk. It is not supported by evidence of active exploitation in the bundle, but exposed outdated clients could be remotely crashed and should be upgraded, isolated, or retired. Mitigation focus: Identify any Novell Client for Windows installations earlier than 4.91 SP3.; Upgrade affected systems to Novell Client for Windows 4.91 SP3 or later if still supported.; Restrict access to port 427 from untrusted networks where business requirements allow..

Prepared

Jun 29, 2026, 08:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.