CVE-2006-2654

Published: Jun 2, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

Affected (27)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 5.0
Freebsd Freebsd	Version 5.0 alpha
Freebsd Freebsd	Version 5.0 release
Freebsd Freebsd	Version 5.0 release_p14
Freebsd Freebsd	Version 5.0 releng
Freebsd Freebsd	Version 5.1
Freebsd Freebsd	Version 5.1 alpha
Freebsd Freebsd	Version 5.1 release
Freebsd Freebsd	Version 5.1 release_p1
Freebsd Freebsd	Version 5.1 release_p5
Freebsd Freebsd	Version 5.1 releng
Freebsd Freebsd	Version 5.2.1
Freebsd Freebsd	Version 5.2.1 release
Freebsd Freebsd	Version 5.2.1 releng
Freebsd Freebsd	Version 5.2
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.3 release
Freebsd Freebsd	Version 5.3 releng
Freebsd Freebsd	Version 5.3 stable
Freebsd Freebsd	Version 5.4
Freebsd Freebsd	Version 5.4 pre-release
Freebsd Freebsd	Version 5.4 release
Freebsd Freebsd	Version 5.4 releng
Freebsd Freebsd	Version 5.4 stable
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable