Vulnerability in Freebsd

CVE-2006-2654

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

EPSS: 0.028 (84.7th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 5.0, 5.1, 5.2
N/a — versions n/a

References

secteam@freebsd.org (x_refsource_OSVDB, vdb-entry)
secteam@freebsd.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
secteam@freebsd.org (vdb-entry, x_refsource_BID)
secteam@freebsd.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
secteam@freebsd.org (vdb-entry, x_refsource_SECTRACK)
secteam@freebsd.org (vdb-entry, x_refsource_XF)