Eternal Terminal

eternal_terminal

Vendor: Eternal Terminal Project • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-23558 1Eternal Terminal Project 1Eternal Terminal Mar 19, 2025 Feb 16, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose t...Show more In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file.Show less
CVE-2022-48258 1Eternal Terminal Project 1Eternal Terminal Nov 4, 2025 Jan 13, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
CVE-2022-48257 1Eternal Terminal Project 1Eternal Terminal Nov 4, 2025 Jan 13, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
CVE-2022-24952 1Eternal Terminal Project 1Eternal Terminal Nov 21, 2024 Aug 16, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the...Show more Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.Show less
CVE-2022-24951 1Eternal Terminal Project 1Eternal Terminal Nov 21, 2024 Aug 16, 2022 N/A· v4 7.0 HIGH· v3 N/A· v2 A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future...Show more A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.Show less
CVE-2022-24950 1Eternal Terminal Project 1Eternal Terminal Nov 21, 2024 Aug 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted us...Show more A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().Show less
CVE-2022-24949 1Eternal Terminal Project 1Eternal Terminal Nov 21, 2024 Aug 16, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().