CVE-2006-2654

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-02 · updated 2026-06-16

Description

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

Affected products

FreeBSD: 5.0, 5.0-alpha, 5.0-release, 5.0-release_p14, 5.0-releng, 5.1 (+21)

References

http://secunia.com/advisories/20390
http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc
http://securitytracker.com/id?1016194
http://www.osvdb.org/25851
http://www.securityfocus.com/bid/18202
https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
http://secunia.com/advisories/20390
http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc
http://securitytracker.com/id?1016194
http://www.osvdb.org/25851
http://www.securityfocus.com/bid/18202
https://exchange.xforce.ibmcloud.com/vulnerabilities/26860

Get alerted when CVE-2006-2654 or the next vulnerability affects your stack