CVE-2006-1864

Published: Apr 26, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.

Affected (14)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.16.2
Linux Linux Kernel	Version 2.6.16.3
Linux Linux Kernel	Version 2.6.16.4
Linux Linux Kernel	Version 2.6.16.7
Linux Linux Kernel	Version 2.6.16.8
Linux Linux Kernel	Version 2.6.16
Linux Linux Kernel	Version 2.6.16 rc1
Linux Linux Kernel	Version 2.6.16 rc2
Linux Linux Kernel	Version 2.6.16 rc3
Linux Linux Kernel	Version 2.6.16 rc4
Linux Linux Kernel	Version 2.6.16 rc5
Linux Linux Kernel	Version 2.6.16 rc6
Linux Linux Kernel	Version 2.6.16_rc7

References (80)

http://secunia.com/advisories/19869

Source: secalert@redhat.com

http://secunia.com/advisories/20237

Source: secalert@redhat.com

http://secunia.com/advisories/20398

Source: secalert@redhat.com

http://secunia.com/advisories/20671

Source: secalert@redhat.com

http://secunia.com/advisories/20716

Source: secalert@redhat.com

http://secunia.com/advisories/20914

Source: secalert@redhat.com

http://secunia.com/advisories/21035

Source: secalert@redhat.com

http://secunia.com/advisories/21476

Source: secalert@redhat.com

http://secunia.com/advisories/21614

Source: secalert@redhat.com

http://secunia.com/advisories/21745

Source: secalert@redhat.com

http://secunia.com/advisories/22497

Source: secalert@redhat.com

http://secunia.com/advisories/22875

Source: secalert@redhat.com

http://secunia.com/advisories/23064

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1097

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1103

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:151

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006-05-31.html

Source: secalert@redhat.com

http://www.osvdb.org/25067

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0493.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0579.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0580.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0710.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/451404/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/451417/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/451419/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/451426/100/200/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17735

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0026

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-302-1

Source: secalert@redhat.com

http://www.vmware.com/download/esx/esx-202-200610-patch.html

Source: secalert@redhat.com

http://www.vmware.com/download/esx/esx-213-200610-patch.html

Source: secalert@redhat.com

http://www.vmware.com/download/esx/esx-254-200610-patch.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/2554

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4502

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189435

Source: secalert@redhat.com

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/26137

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11327

Source: secalert@redhat.com

http://secunia.com/advisories/19869