Google : Security Vulnerabilities
pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.
| Max Base Score | 1.9 |
| Published | 2013-04-24 |
| Updated | 2013-05-07 |
| EPSS | 0.04% |
The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary files by constructing a (1) symlink or (2) hard link, a different vulnerability than CVE-2012-3485.
| Max Base Score | 1.2 |
| Published | 2012-08-26 |
| Updated | 2012-08-27 |
| EPSS | 0.04% |
Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a specific PID value to be assigned to a target process.
| Max Base Score | 1.2 |
| Published | 2012-08-26 |
| Updated | 2012-08-27 |
| EPSS | 0.04% |
3 vulnerabilities found