What’s Vulnerable › Vulnerabilities

CVE-2006-1864

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-04-26 · updated 2026-06-16

Description

Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.

Affected products

• Linux kernel: 2.6.16, 2.6.16-rc1, 2.6.16-rc2, 2.6.16-rc3, 2.6.16-rc4, 2.6.16-rc5 (+8)

References

• http://secunia.com/advisories/19869
• http://secunia.com/advisories/20237
• http://secunia.com/advisories/20398
• http://secunia.com/advisories/20671
• http://secunia.com/advisories/20716
• http://secunia.com/advisories/20914
• http://secunia.com/advisories/21035
• http://secunia.com/advisories/21476
• http://secunia.com/advisories/21614
• http://secunia.com/advisories/21745
• http://secunia.com/advisories/22497
• http://secunia.com/advisories/22875

Get alerted when CVE-2006-1864 or the next vulnerability affects your stack