CVE-2006-2654

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-2654
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

6.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/20390 Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc Vendor Advisory
http://securitytracker.com/id?1016194
http://www.osvdb.org/25851
http://www.securityfocus.com/bid/18202
https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
http://secunia.com/advisories/20390 Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc Vendor Advisory
http://securitytracker.com/id?1016194
http://www.osvdb.org/25851
http://www.securityfocus.com/bid/18202
https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:release_p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*
History

21 Nov 2024, 00:11

Type Values Removed Values Added
References () http://secunia.com/advisories/20390 - Vendor Advisory () http://secunia.com/advisories/20390 - Vendor Advisory
References () http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc - Vendor Advisory () http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc - Vendor Advisory
References () http://securitytracker.com/id?1016194 - () http://securitytracker.com/id?1016194 -
References () http://www.osvdb.org/25851 - () http://www.osvdb.org/25851 -
References () http://www.securityfocus.com/bid/18202 - () http://www.securityfocus.com/bid/18202 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/26860 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/26860 -
Information

Published : 2006-06-02 01:02

Updated : 2025-04-03 01:03

NVD link : CVE-2006-2654

Mitre link : CVE-2006-2654

CVE.ORG link : CVE-2006-2654

JSON object : View

Products Affected

freebsd

  • freebsd
CWE
NVD-CWE-Other