78 matches found
SUSE CVE-2022-24949
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen...
SUSE CVE-2022-24950
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...
SUSE CVE-2022-24952
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket...
SUSE CVE-2022-24951
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...
SUSE CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48257
CVE-2022-48257 affects EternalTerminal
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
PT-2023-15653 · Unknown · Eternal Terminal
Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns predictable logfile names in /tmp for etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, consider renaming or restricting access to the logfiles in /tmp t...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
Eternal Terminal 安全漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1 that stems from its etserver and etclient having predictable log file names in /tmp...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48258
CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
PT-2023-15654 · Unknown · Eternal Terminal
Name of the Vulnerable Software and Affected Versions: Eternal Terminal version 6.2.1 Description: The issue concerns world-readable logfiles in etserver and etclient. Recommendations: For Eternal Terminal version 6.2.1, restrict access to the logfiles of etserver and etclient to prevent...
Eternal Terminal 安全漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1, which stems from the existence of globally readable log files for its etserver and etclient...