13 matches found
EUVD-2022-50967
Malicious code in bioql PyPI...
PT-2023-19039
Name of the Vulnerable Software and Affected Versions Eternal Terminal version 6.2.1 Description The issue arises from TelemetryService using fixed paths in /tmp, allowing a local attacker to create a file such as /tmp/.sentry-native-etserver with mode 0777 before the etserver process starts. Thi...
CVE-2023-23558: Improper Link Resolution Before File Access
In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in tha...
SUSE CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
SUSE CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
Eternal Terminal 安全漏洞
Eternal Terminal is a remote shell by Jason Gauci Personal Developer. A security vulnerability exists in Eternal Terminal version 6.2.1 that stems from its etserver and etclient having predictable log file names in /tmp...
CVE-2022-48257: Incorrect Permission Assignment for Critical Resource
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48258
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles...
CVE-2022-48258
CVE-2022-48258 affects EternalTerminal 6.2.1; etserver and etclient create world-readable logfiles, enabling potential exposure of logs containing sensitive data. The CVSS v3.1 base score is 5.3 (Medium) with Confidentiality impact Low. Remediation: update to 6.2.8 (and related package fixes) as ...
