NetSight
IP …
medium4.6Public exploit code

CVE-2006-1864

Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
Versions 2.6.16, 2.6.16.1, 2.6.16.2, 2.6.16.3, 2.6.16.4, 2.6.16.7

References