Race condition

2022-08-1601:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%

JSON

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users’ SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().

CPENameOperatorVersion
eternal_terminallt6.2.0

CPE	Name	Operator	Version
	eternal_terminal	lt	6.2.0

References

www.openwall.com/lists/oss-security/2023/02/16/1

github.com/metaredteam/external-disclosures/security/advisories/GHSA-85gw-pchc-4rf3

github.com/MisterTea/EternalTerminal/commit/900348bb8bc96e1c7ba4888ac8480f643c43d3c3