Jason Gauci vulnerabilities
We track 3 vulnerabilities in Jason Gauci products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2022.
Latest Jason Gauci vulnerabilities
- 7.0 High severity
Eternal Terminal: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
- 7.5 High severity
Eternal Terminal: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::g
- 7.5 High severity
Eternal Terminal: Buffer Copy without Checking Size of Input
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().