Lucene search
PRIOn knowledge basePRION:CVE-2015-3408HistoryMay 19, 2015 - 6:59 p.m.
Sql injection
2015-05-1918:59:00
PRIOn knowledge base
www.prio-n.com
1
7.9 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
87.0%
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.10 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 15.04 | |
| module-signature | le | 0.73 |
References
Related
debiancve
debiancve
CVE-2015-3408
2015-05-19 18:59:00
ubuntucve
ubuntucve
CVE-2015-3408
2015-04-23 00:00:00
cve
cve
CVE-2015-3408
2015-05-19 18:59:00
cvelist
cvelist
CVE-2015-3408
2015-05-19 18:00:00
nessus
nessus
Mandriva Linux Security Advisory : perl-Module-Signature (MDVSA-2015:207)
2015-04-28 00:00:00
Debian DSA-3261-1 : libmodule-signature-perl - security update
2015-05-18 00:00:00
Debian DLA-264-1 : libmodule-signature-perl security update
2015-07-02 00:00:00
osv
osv
libmodule-signature-perl - security update
2015-07-01 00:00:00
libmodule-signature-perl - security update
2015-05-15 00:00:00
debian
debian
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update
2015-05-15 18:09:53
[SECURITY] [DLA 264-1] libmodule-signature-perl security update
2015-07-01 11:46:45
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update
2015-05-15 18:09:35
openvas
openvas
Debian: Security Advisory (DSA-3261-1)
2015-05-14 00:00:00
Debian: Security Advisory (DLA-264-1)
2023-03-08 00:00:00
securityvulns
securityvulns
[USN-2607-1] Module::Signature vulnerabilities
2015-05-12 00:00:00
perl-Module-Signature content spoofing
2015-05-12 00:00:00
ubuntu
ubuntu
Module::Signature vulnerabilities
2015-05-12 00:00:00
7.9 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.016 Low
EPSS
Percentile
87.0%
Related for PRION:CVE-2015-3408