CVE-2022-48257

Description

References

• openwall.com/lists/oss-security/2023/02/16/1
• MisterTea/EternalTerminal · Issue Tracking
• MisterTea/EternalTerminal#556 · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYODHZECXYFC2BNODZPZXZAXOKGMCYAP
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL
• lists.fedoraproject.org/archives/list/[email protected]/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L

More vulnerabilities in eternal terminal

• CVE-2023-23558MEDIUM 6.3In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver …
• CVE-2022-48258MEDIUM 5.3In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
• CVE-2022-24952MEDIUM 6.5Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid…
• CVE-2022-24951HIGH 7.0A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, en…
• CVE-2022-24950HIGH 7.5A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authoriz…