CVE-2012-4676

CWE-593 documents3 sources
Severity
1.2LOW
EPSS
0.0%
top 89.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Tunnelblick
Timeline
PublishedAug 26
Latest updateMay 17

Description

The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.

CVSS vector

AV:L/AC:H/C:N/I:P/A:NExploitability: 1.9 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/tunnelblick3.3beta20

🔴Vulnerability Details

2
GHSA
GHSA-rvmj-pg73-4rvj: The errorExitIfAttackViaString function in Tunnelblick 3↗2022-05-17
▶
CVEList
CVE-2012-4676: The errorExitIfAttackViaString function in Tunnelblick 3↗2012-08-26
▶