TI-2023-09389 CVE-2023-23558 · GHSA-m7cp-w3xh-qr3p
In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp.
Priority MEDIUM 63
In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp.
Jason Gauci
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Jason Gauci records in CISA KEVNo Jason Gauci vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2022-08749 CVE-2022-24950
Race condition in Jason Gauci Eternal Terminal
Priority LOW 36
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted us…
TI-2022-08748 CVE-2022-24949
Race condition in Jason Gauci Eternal Terminal
Priority LOW 35
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0.
TI-2022-23893 CVE-2022-48258 · GHSA-445m-q5mj-2gj6
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
Priority LOW 32
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
TI-2022-23892 CVE-2022-48257 · GHSA-9526-g73c-89rr
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
Priority LOW 32
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
Priority LOW 32
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the…
TI-2022-08750 CVE-2022-24951
Race condition in Jason Gauci Eternal Terminal
Priority LOW 31
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future…