Jason Gauci

Products

ProductCVEsExploitedLatest
Eternal Terminal4–Aug 16, 2022

Exploited and recent CVEs

  • CVE-2022-24949 Unrated A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen(). 1.1%
  • CVE-2022-24951 Unrated A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to c 0.3%
  • CVE-2022-24950 Unrated A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other system 1.3%
  • CVE-2022-24952 Unrated Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input 1.7%