CVE-2012-3485

CVE-2012-3485 describes a local privilege escalation vulnerability in Tunnelblick 3.3beta20 and earlier. The software insecurely uses argv[0] to locate kernel modules or executables, allowing a local attacker to gain root privileges by manipulating the execl system call. This vulnerability has a CVSS score of 7.2 (High) due to its low attack complexity and complete impact on confidentiality, integrity, and availability. Exploit code, including a Metasploit module and ExploitDB entries, is publicly available, though there is no evidence of active exploitation or significant community discussion.