NVD

Id
45078  
Name
CVE-2012-3485  
Description
Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname or (2) executable file pathname, which allows local users to gain privileges via an execl system call.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-26  
Modified Date
2013-12-13  
Seq
2012-3485  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226040 45078 CVE-2012-3485 20120811 OS X Local Root: Silly SUID Helper in Tunnel Blick  View
226041 45078 CVE-2012-3485 http://code.google.com/p/tunnelblick/issues/detail?id=212  View
226042 45078 CVE-2012-3485 http://git.zx2c4.com/Pwnnel-Blicker/tree/pwnnel-blicker-for-kids.sh  View
226043 45078 CVE-2012-3485 24578  View
226044 45078 CVE-2012-3485 [oss-security] 20120812 Re: Tunnel Blick: Multiple Vulnerabilities to Local Root and DoS (OS X)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28206 JVNDB-2012-003913 Tunnelblick における権限を取得される脆弱性 Tunnelblick は、argv[0] に依存して、適切な (1) カーネルモジュールのパス名、または (2) 実行可能ファイルのパス名を決定するため、権限を取得される脆弱性が存在します。 CVE-2012-3485 56723 CVE-2012-3485 45078 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003913.html 2012-08-26 2012-08-29 View