CVE-2012-4676

The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a 1 symlink or 2 hard link, a different vulnerability than CVE-2012-3485...

CVE-2012-4676

CVE-2012-4676 affects Tunnelblick 3.3beta20 and earlier. The errorExitIfAttackViaString function allows local users to delete arbitrary files by constructing (1) a symlink or (2) a hard link. This is a separate issue from CVE-2012-3485. The NVD entry notes a low base score (1.2) with local attack...