What’s Vulnerable › Vulnerabilities

CVE-2023-23558

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-16 · updated 2026-06-17
• Weakness: CWE-59

Description

In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file.

Affected products

• Jason Gauci Eternal Terminal: 6.2.1

References

• http://www.openwall.com/lists/oss-security/2023/02/16/1
• https://bugzilla.suse.com/show_bug.cgi?id=1207126
• https://github.com/MisterTea/EternalTerminal
• http://www.openwall.com/lists/oss-security/2023/02/16/1
• https://bugzilla.suse.com/show_bug.cgi?id=1207126
• https://github.com/MisterTea/EternalTerminal

Get alerted when CVE-2023-23558 or the next vulnerability affects your stack