NuytsTech Security

CVE-2006-2654

by ·

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

Date published : 2006-06-01

http://www.securityfocus.com/bid/18202

http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc

Tags: