CVE-2006-2654: Medium severity freebsd freebsd vulnerability
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2654?
CVE-2006-2654 is classified as a moderate risk vulnerability, allowing local users to bypass chroot restrictions.
How do I fix CVE-2006-2654?
To fix CVE-2006-2654, you should upgrade the affected FreeBSD versions to a patched release that addresses this vulnerability.
Which FreeBSD versions are affected by CVE-2006-2654?
CVE-2006-2654 affects FreeBSD versions 4.10 through 6.1, including specific versions like 5.0, 5.1, 5.2.1, 5.3, 5.4, and 6.0.
Can CVE-2006-2654 be exploited remotely?
CVE-2006-2654 cannot be exploited remotely, as it requires local user access to the system.
What type of vulnerability is CVE-2006-2654?
CVE-2006-2654 is a directory traversal vulnerability that allows users to escape chroot restrictions in SMB-mounted filesystems.