CVE-2012-3485

This Metasploit module exploits a privilege escalation vulnerability in Tunnelblick 3.2.8 by leveraging insufficient path validation in the setuid openvpnstart binary to execute arbitrary shell scripts as root.

This exploit leverages a directory traversal vulnerability in Tunnelblick to execute arbitrary code with elevated privileges. It creates a malicious directory structure and symlink to trick the application into executing a payload.

This Metasploit module exploits a privilege escalation vulnerability in Tunnelblick 3.2.8 on macOS. It leverages insufficient path validation in the setuid `openvpnstart` binary to execute arbitrary shell scripts as root.