Privilege Escalation Vulnerability in Tunnelblick by OpenVPN

CVE-2012-3486

Summary

Tunnelblick versions 3.3beta20 and earlier contain a vulnerability that allows local users to escalate privileges. This occurs when an OpenVPN configuration file is improperly set up to execute a script upon specific OpenVPN events. Malicious users can exploit this condition to gain elevated privileges, posing significant security risks to systems using Tunnelblick.

References