CVE-2006-1864

Linux Kernel - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences, a similar vulnerability to CVE-2006-1863.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Marcel Holtmann · textlocallinux

https://www.exploit-db.com/exploits/27766

View Code ZIP pw:eip

References (40)

[Third Party Advisory, VDB Entry] http://www.osvdb.org/25067

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/451417/100/200/threaded

[Exploit] https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189435

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/26137

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2006-0493.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2006-0579.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2006-0580.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2006-0710.html

[Vendor Advisory] http://www.ubuntu.com/usn/usn-302-1

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:150

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2006:151

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm

[Vendor Advisory] http://www.vmware.com/download/esx/esx-202-200610-patch.html

[Vendor Advisory] http://www.vmware.com/download/esx/esx-213-200610-patch.html

[Vendor Advisory] http://www.vmware.com/download/esx/esx-254-200610-patch.html

[Vendor Advisory] http://www.trustix.org/errata/2006/0026

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2006-05-31.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/451404/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/451419/100/200/threaded

... and 20 more

Scores

EPSS 0.0030

EPSS Percentile 53.2%

Classification

Status draft

Affected Products (14)

linux/linux_kernel

Timeline

Published Apr 26, 2006

Tracked Since Feb 18, 2026