Setuid Tunnelblick Privilege Escalation
Posted by deepcore on March 5, 2013 – 1:52 am
This Metasploit module exploits a vulnerability in Tunnelblick 3.2.8 on Mac OS X. The vulnerability exists in the setuid openvpnstart, where an insufficient validation of path names allows execution of arbitrary shell scripts as root. This Metasploit module has been tested successfully on Tunnelblick 3.2.8 build 2891.3099 over Mac OS X 10.7.5.
Post a reply
You must be logged in to post a comment.