CVE:CVE-2006-2654
CNNVD:CNNVD-200606-016
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。
FreeBSD的smbfs对请求的路径处理存在漏洞，远程攻击者可能利用此漏洞在进行目录遍历，访问非授权的文件。
FreeBSD的smbfs没有正确地过滤包含有反斜线的路径。具体的说，SMB/CIFS服务器将目录名"..\"解释为父目录，但smbfs以与其他目录同样的方式处理该目录。在smbfs加载文件系统的chroot环境中，攻击者可以摆脱这个chroot的限制，访问smbfs加载文件系统的任意其他目录。
solution:Upgrade freebsd freebsd to a higher version than 5.0,5.0:alpha,5.0:release,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p1,5.1:release_p5,5.1:releng,5.2,5.2.1,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0,6.0:release,6.0:stable,and avoid the version 5.0,5.0:alpha,5.0:release,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p1,5.1:release_p5,5.1:releng,5.2,5.2.1,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4,5.4:pre-release,5.4:release,5.4:releng,5.4:stable,6.0,6.0:release,6.0:stable