CVE-2022-24952

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2023/02/16/1
• MisterTea/EternalTerminal release et-v6.2.0 · Third Party Advisory
• metaredteam/external-disclosures security advisory · Exploit

Lỗ hổng khác của eternal terminal

• CVE-2023-23558TRUNG BÌNH 6.3In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver …
• CVE-2022-48258TRUNG BÌNH 5.3In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
• CVE-2022-48257TRUNG BÌNH 5.3In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
• CVE-2022-24951CAO 7.0A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, en…
• CVE-2022-24950CAO 7.5A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authoriz…