|
Eterm PATH_ENV Buffer Overflow Vulnerability
Eterm has been reported prone to a local buffer overflow vulnerability. Code execution with elevated privileges has been confirmed possible. The issue is due to a lack of sufficient bounds checking performed on an environment variable that is copied into an internal memory buffer. An attacker may exploit this vulnerability to have arbitrary shell code executed with elevated privileges. Code execution will occur in the context of the vulnerable Eterm, which may have setuid/setgid utmp or possibly root on some Unix/Linux distributions. |
|
 Privacy Statement |
