Lucene search
PRIOn knowledge basePRION:CVE-2015-3409HistoryMay 19, 2015 - 6:59 p.m.
Design/Logic Flaw
2015-05-1918:59:00
PRIOn knowledge base
www.prio-n.com
2
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.10 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 15.04 | |
| module-signature | le | 0.74 |
References
ubuntu.com/usn/usn-2607-1
www.debian.org/security/2015/dsa-3261
www.openwall.com/lists/oss-security/2015/04/07/1
www.openwall.com/lists/oss-security/2015/04/23/17
www.securityfocus.com/bid/73937
github.com/audreyt/module-signature/commit/c41e8885b862b9fce2719449bc9336f0bea658ef
metacpan.org/changes/distribution/Module-Signature
Related
debiancve
debiancve
CVE-2015-3409
2015-05-19 18:59:06
nvd
nvd
CVE-2015-3409
2015-05-19 18:59:06
cvelist
cvelist
CVE-2015-3409
2015-05-19 18:00:00
ubuntucve
ubuntucve
CVE-2015-3409
2015-04-23 00:00:00
cve
cve
CVE-2015-3409
2015-05-19 18:59:06
debian
debian
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update
2015-05-15 18:09:35
[SECURITY] [DLA 264-1] libmodule-signature-perl security update
2015-07-01 11:46:45
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update
2015-05-15 18:09:35
osv
osv
libmodule-signature-perl - security update
2015-07-01 00:00:00
libmodule-signature-perl - security update
2015-05-15 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : perl-Module-Signature (MDVSA-2015:207)
2015-04-28 00:00:00
openSUSE Security Update : perl-Module-Signature (openSUSE-2016-61)
2016-01-25 00:00:00
Ubuntu 14.04 LTS : Module::Signature vulnerabilities (USN-2607-1)
2015-05-13 00:00:00
securityvulns
securityvulns
perl-Module-Signature content spoofing
2015-05-12 00:00:00
[USN-2607-1] Module::Signature vulnerabilities
2015-05-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2607-1)
2015-06-09 00:00:00
Debian: Security Advisory (DLA-264-1)
2023-03-08 00:00:00
ubuntu
ubuntu
Module::Signature vulnerabilities
2015-05-12 00:00:00