QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3484

Published: Aug 26, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass intended access restrictions and gain privileges via a (1) user-mountable image or (2) network share.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)

mailing-list

x_refsource_MLIST

http://code.google.com/p/tunnelblick/issues/detail?id=212

x_refsource_CONFIRM

20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.