CVE-2006-2654: Freebsd

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.

Affected products

• Freebsd Freebsd: version 5.0 only; version 5.1 only; version 5.2 only; version 5.2.1 only; version 5.3 only; version 5.4 only; …

Published 2006-06-02. Last modified 2026-06-16.