VulnerabilityModified
CVE-2006-2654
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences.
MEDIUM 6.4EPSS 2.75%
Does this matter?
Lower severity and a low EPSS score (2.75%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 2.75% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- freebsd/freebsd
- Source
- secteam@freebsd.org
References
- http://secunia.com/advisories/20390Vendor Advisory
- http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.ascVendor Advisory
- http://securitytracker.com/id?1016194
- http://www.osvdb.org/25851
- http://www.securityfocus.com/bid/18202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
- http://secunia.com/advisories/20390Vendor Advisory
- http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.ascVendor Advisory
- http://securitytracker.com/id?1016194
- http://www.osvdb.org/25851
- http://www.securityfocus.com/bid/18202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.