Vulnerability in Google Tunnelblick

CVE-2012-3486

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event.

EPSS: 0.003 (20.1th percentile) — read the EPSS interpretation.

Affected products

Google Tunnelblick
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (mailing-list, x_refsource_FULLDISC)