PT-2012-5544

CVE-2012-4677

Published

2012-08-26

Updated

2012-08-27

CVSS 2.0

4.4

Medium

MetricsAV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta20 and earlier

Description The issue allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

Recommendations For Tunnelblick versions 3.3beta20 and earlier, update to a version later than 3.3beta20 to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾