Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2015-3408

perl-Module-Signature: arbitrary code execution when verifying module signatures

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed
Vendors
Canonical Module-signature Project
Products
Ubuntu Linux Module-signature
CVE-2015-3409

perl-Module-Signature: arbitrary modules loading in some circumstances

Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Canonical Module-signature Project
Products
Ubuntu Linux Module-signature
CVE-2015-3406

perl-Module-Signature: unsigned files interpreted as signed in some circumstances

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Canonical Module-signature Project
Products
Ubuntu Linux Module-signature