CVE-2006-2654

Опубликовано: 02 июн. 2006

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.0:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:release_p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.2.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00632

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cj4c-9x4r-m99w

github

почти 4 года назад

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.