Lucene search
HistoryMay 19, 2015 - 6:59 p.m.
CVE-2015-3408
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
87.4%
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
Affected configurations
Node
module-signature_projectmodule-signatureRange≤0.73
Node
canonicalubuntu_linuxMatch12.04lts
ORcanonicalubuntu_linuxMatch14.04lts
ORcanonicalubuntu_linuxMatch14.10
ORcanonicalubuntu_linuxMatch15.04
References
Related
prion
prion
Sql injection
2015-05-19 18:59:00
cve
cve
CVE-2015-3408
2015-05-19 18:59:05
cvelist
cvelist
CVE-2015-3408
2015-05-19 18:00:00
debiancve
debiancve
CVE-2015-3408
2015-05-19 18:59:05
ubuntucve
ubuntucve
CVE-2015-3408
2015-04-23 00:00:00
nessus
nessus
Debian DSA-3261-1 : libmodule-signature-perl - security update
2015-05-18 00:00:00
openSUSE Security Update : perl-Module-Signature (openSUSE-2016-61)
2016-01-25 00:00:00
Ubuntu 14.04 LTS : Module::Signature vulnerabilities (USN-2607-1)
2015-05-13 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3261-1)
2015-05-14 00:00:00
Debian: Security Advisory (DLA-264-1)
2023-03-08 00:00:00
osv
osv
libmodule-signature-perl - security update
2015-05-15 00:00:00
libmodule-signature-perl - security update
2015-07-01 00:00:00
ubuntu
ubuntu
Module::Signature vulnerabilities
2015-05-12 00:00:00
debian
debian
[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update
2015-05-20 20:25:44
[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update
2015-05-20 20:25:44
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update
2015-05-15 18:09:35
securityvulns
securityvulns
[USN-2607-1] Module::Signature vulnerabilities
2015-05-12 00:00:00
perl-Module-Signature content spoofing
2015-05-12 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
87.4%
Related for NVD:CVE-2015-3408