Tunnelblick (Google) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2012-08-26. Vendor: Google.

CVEs of Tunnelblick

• CVE-2012-3487 - CVSS 1.2 (low), 2012-08-26: Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a…
• CVE-2012-3486 - CVSS 6.9 (medium), 2012-08-26: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence…
• CVE-2012-4677 - CVSS 4.4 (medium), 2012-08-26: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.
• CVE-2012-3485 - CVSS 7.2 (high), 2012-08-26: Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which…
• CVE-2012-4676 - CVSS 1.2 (low), 2012-08-26: The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2)…
• CVE-2012-3484 - CVSS 7.2 (high), 2012-08-26: Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program can be safely executed, which allows…
• CVE-2012-3483 - CVSS 6.2 (medium), 2012-08-26: Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.