CVE-2023-23558

概要

参考情報

• openwall.com/lists/oss-security/2023/02/16/1 · Mailing List
• bugzilla.suse.com/show_bug.cgi · Exploit
• MisterTea/EternalTerminal · Product

eternal terminal のその他の脆弱性

• CVE-2022-48258中 5.3In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
• CVE-2022-48257中 5.3In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
• CVE-2022-24952中 6.5Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid…
• CVE-2022-24951高 7.0A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, en…
• CVE-2022-24950高 7.5A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authoriz…