CVE-2012-3484: Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whet...

Security readout for executives and security teams

This CVE describes an old Tunnelblick weakness where the application trusted ownership and permission checks that could be bypassed. A local user could use a user-mountable image or network share to get around intended restrictions and gain higher privileges on affected OS X systems. Exposure is limited to systems running Tunnelblick 3.3beta20 or earlier, primarily OS X endpoints where local users can mount images or access network shares. The provided affected-product metadata is incomplete, so inventory validation is required. Treat this as high priority only where legacy Tunnelblick remains installed. The issue can turn local access into higher privileges, but the available sources do not show current exploitation or a vendor-confirmed fix in this bundle. Mitigation focus: Identify and retire Tunnelblick 3.3beta20 and earlier where present.; Check Tunnelblick issue 212 or vendor guidance for fixed-release direction.; Restrict local user access on affected endpoints until remediated..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.