CVE-2012-3483
Tunnelblick < 3.3beta20 - Local Privilege Escalation via Race Condition in runScript
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-3483. PoCs published by zx2c4.
AI-analyzed exploit summary This exploit leverages a race condition in Tunnelblick's SUID executable to achieve local privilege escalation. It manipulates file permissions and symlinks to execute arbitrary code as root.
Description
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by replacing a script file.
Exploits (2)
This exploit leverages a race condition in Tunnelblick's SUID executable to achieve local privilege escalation. It manipulates file permissions and symlinks to execute arbitrary code as root.
This exploit leverages a directory traversal vulnerability in Tunnelblick to execute arbitrary commands with elevated privileges. It creates a malicious directory structure and symlink to trick the application into executing a payload that spawns a root shell.