Unscored severity · published Aug 26, 2012
CVE-2012-3485
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to…
–
CVSS
3.8%
EPSS
No
On KEV
Description
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Tunnelblick · Google
through 3.3beta20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3485
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3485
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html
code.google.com
http://code.google.com/p/tunnelblick/issues/detail?id=212
git.zx2c4.com
http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh
www.exploit-db.com
http://www.exploit-db.com/exploits/24578
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/14/1
More from Tunnelblick
–
CVE-2012-4677
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value
–
CVE-2012-4676
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a…
–
CVE-2012-3487
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process
–
CVE-2012-3486
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event
–
CVE-2012-3484
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass…