What is CVE-2012-3485?

CVE-2012-3485 is a vulnerability in Google Tunnelblick, classified under Improper Input Validation. Published 2012-08-26.

Is CVE-2012-3485 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Google Tunnelblick

CVE-2012-3485

Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Google Tunnelblick
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

rapid7/metasploit-framework

References

secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_FULLDISC)
secalert@redhat.com (exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2012-3485?: CVE-2012-3485 is a vulnerability in Google Tunnelblick, classified under Improper Input Validation. Published 2012-08-26.
Is CVE-2012-3485 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.