Eternal Terminal vulnerabilities
3 known vulnerabilities in Eternal Terminal from Jason Gauci. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
Eternal Terminal: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.
- 7.5 High severity
Eternal Terminal: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::g
- 7.5 High severity
Eternal Terminal: Buffer Copy without Checking Size of Input
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().