CVE-2015-3406

概要

参考情報

• ubuntu.com/usn/usn-2607-1 · Patch
• openwall.com/lists/oss-security/2015/04/07/1 · Mailing List
• openwall.com/lists/oss-security/2015/04/23/17 · Mailing List
• audreyt/module-signature commit 8a91645 · Patch
• metacpan.org/changes/distribution/Module-Signature · Release Notes

module-signature のその他の脆弱性

• CVE-2015-3409高 7.2Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under t…
• CVE-2015-3408緊急 10.0Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly…
• CVE-2015-3407中 5.0Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the…