GCVE - cpe:2.3:a:google:tunnelblick:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:google:tunnelblick:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Tunnelblick (`4de61e9b-9ece-5d57-a6f3-da24dd9e8479`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-4677`	vulnerable	2026-06-08 05:02:52.108720	Details available Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value. Published: 2012-08-26T19:00:00.000Z Updated: 2024-09-16T17:28:45.167Z Open on db.gcve.eu Reference links http://code.google.com/p/tunnelblick/issues/detail?id=212	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4676`	vulnerable	2026-06-08 05:02:52.108365	Details available The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485. Published: 2012-08-26T19:00:00.000Z Updated: 2024-09-16T22:56:55.880Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/08/14/1 http://code.google.com/p/tunnelblick/issues/detail?id=212 http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3487`	vulnerable	2026-06-08 05:02:10.164757	Details available Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process. Published: 2012-08-26T19:00:00.000Z Updated: 2024-09-17T03:42:57.974Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/08/14/1 http://code.google.com/p/tunnelblick/issues/detail?id=212 http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3486`	vulnerable	2026-06-08 05:02:10.164456	Details available Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event. Published: 2012-08-26T19:00:00.000Z Updated: 2024-09-16T20:51:44.436Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/08/14/1 http://code.google.com/p/tunnelblick/issues/detail?id=212 http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3485`	vulnerable	2026-06-08 05:02:10.164001	Details available Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call. Published: 2012-08-26T19:00:00.000Z Updated: 2024-08-06T20:05:12.644Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/08/14/1 http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh http://code.google.com/p/tunnelblick/issues/detail?id=212 http://archives.neohapsis.com/archives/fulldisclosure/2012-08/0122.html http://www.exploit-db.com/exploits/24578	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3484`	vulnerable	2026-06-08 05:02:10.163652	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3483`	vulnerable	2026-06-08 05:02:10.163234	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.