CVE-2006-2304

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-11 · updated 2026-06-16

Description

Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which triggers the overflows in the ndps_xdr_array function. NOTE: this was originally reported to be a buffer overflow by Novell, but the original cause is an integer overflow.

Affected products

Novell Client: 4.83-sp3, 4.90-sp2, 4.91-sp2

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html
http://secunia.com/advisories/20048
http://securitytracker.com/id?1016052
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973719.htm
http://www.hustlelabs.com/novell_ndps_advisory.pdf
http://www.osvdb.org/25429
http://www.securityfocus.com/archive/1/434017/100/0/threaded
http://www.securityfocus.com/bid/17931
http://www.vupen.com/english/advisories/2006/1759
https://exchange.xforce.ibmcloud.com/vulnerabilities/26314
http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html
http://secunia.com/advisories/20048

Get alerted when CVE-2006-2304 or the next vulnerability affects your stack