Hardcoded credentials

The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a 1 symlink or 2 hard link, a different vulnerability than CVE-2012-3485...

PT-2012-5543

Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta20 and earlier Description The issue allows local users to delete arbitrary files by constructing a symlink or hard link. This is a result of a problem in the errorExitIfAttackViaString function. Recommendations For...

CVE-2012-4676: Improper Link Resolution Before File Access

The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a 1 symlink or 2 hard link, a different vulnerability than CVE-2012-3485...