PT-2012-4752

CVE-2012-3486

·

Published

2012-08-26

·

Updated

2012-08-27

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta20 and earlier
Description The issue allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.
Recommendations For versions 3.3beta20 and earlier, consider restricting the execution of scripts from OpenVPN configuration files to minimize the risk of exploitation.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-3486
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com