Unscored severity · published Aug 26, 2012
CVE-2012-3487
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process
–
CVSS
0.1%
EPSS
No
On KEV
Description
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Tunnelblick · Google
through 3.3beta20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3487
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3487
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html
code.google.com
http://code.google.com/p/tunnelblick/issues/detail?id=212
www.openwall.com
http://www.openwall.com/lists/oss-security/2012/08/14/1
More from Tunnelblick
–
CVE-2012-4677
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value
–
CVE-2012-4676
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a…
–
CVE-2012-3486
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event
–
CVE-2012-3485
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to…
–
CVE-2012-3484
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass…