VULNERABILITY INTELLIGENCE
CVE-2012-4676
CVSS score1.2 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2012-08-26
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:N/I:P/A:N
Description
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')