Skip to content
OpenAdvisories
Unscored CVE-2012-3484 EUVD-2012-3440GHSA-mj6f-9gq2-27j9

Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely exec…

Published Aug 26, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access restrictions and gain privileges via a (1) user-mountable image or (2) network share.

References