Jason Gauci

2 exploits Active since Aug 2022
CVE-2022-24949 WRITEUP HIGH WRITEUP
Eternal Terminal < 6.2.0 - Privilege Escalation via PipeSocketHandler Race Condition
A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen().
CVSS 7.5
CVE-2022-24950 WRITEUP HIGH WRITEUP
Eternal Terminal < 6.2.0 - Authenticated SSH Authorization Socket Hijack via Race Condition in UserTerminalRouter
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().
CVSS 7.5