Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD SMBFS 访问控制绕过漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的smbfs对请求的路径处理存在漏洞，远程攻击者可能利用此漏洞在进行目录遍历，访问非授权的文件。 FreeBSD的smbfs没有正确地过滤包含有反斜线的路径。具体的说，SMB/CIFS服务器将目录名"..\"解释为父目录，但smbfs以与其他目录同样的方式处理该目录。在smbfs加载文件系统的chroot环境中，攻击者可以摆脱这个chroot的限制，访问smbfs加载文件系统的任意其他目录。
CVSS Information
N/A
Vulnerability Type
N/A