Unscored CVE-2012-3486 EUVD-2012-3442GHSA-m776-ggrp-96xq

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a scr…

Published Aug 26, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.

References

[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X) mailing-list
http://code.google.com/p/tunnelblick/issues/detail?id=212
20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick mailing-list