Security update for EternalTerminal (important)

openSUSE Security Update: Security update for EternalTerminal Announcement ID: openSUSE-SU-2022:10187-1 Rating: important References: 1202432 1202433 1202434 1202435 Cross-References: CVE-2022-24949 CVE-2022-24950 CVE-2022-24951 CVE-2022-24952 CVSS scores: CVE-2022-24949 NVD : 7.5...

Race condition

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...

CVE-2022-24950

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...

PT-2022-17007

Name of the Vulnerable Software and Affected Versions Eternal Terminal versions prior to 6.2.0 Description A race condition exists in the software that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted...

Eternal Terminal 竞争条件问题漏洞

Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal versions prior to 6.2.0 that originated from allowing an authenticated attacker to hijack another user's SSH authorization socket, allowing the attacker to log in to another...

CVE-2022-24950: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId...