TU
Product
Tunnelblick
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Tunnelblick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-4677 | – | Aug 26 | Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value Affected: through 3.3beta20 |
| CVE-2012-4676 | – | Aug 26 | The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a… Affected: through 3.3beta20 |
| CVE-2012-3487 | – | Aug 26 | Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process Affected: through 3.3beta20 |
| CVE-2012-3486 | – | Aug 26 | Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event Affected: through 3.3beta20 |
| CVE-2012-3485 | – | Aug 26 | Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to… Affected: through 3.3beta20 |
| CVE-2012-3484 | – | Aug 26 | Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows local users to bypass… Affected: through 3.3beta20 |
| CVE-2012-3483 | – | Aug 26 | Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file Affected: through 3.3beta20 |
Showing 7