Tunnelblick
CVE-2012-3487
LOW
Severity by source
AV:L/AC:H/Au:N/C:N/I:P/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
AV:L/AC:H/Au:N/C:N/I:P/A:N
Lifecycle Timeline
1DescriptionCVE.org
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.
AnalysisAI
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process. Rated low severity (CVSS 1.2). No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-362. Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process. Affected products include: Google Tunnelblick.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Tunnelblick
View allTunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary file
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control th
Same weakness CWE-362 – Race Condition
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today