CVE-2015-3408

概要

参考情報

• ubuntu.com/usn/usn-2607-1
• debian.org/security/2015/dsa-3261
• openwall.com/lists/oss-security/2015/04/07/1
• openwall.com/lists/oss-security/2015/04/23/17
• audreyt/module-signature commit 8a91645
• metacpan.org/changes/distribution/Module-Signature

module-signature のその他の脆弱性

• CVE-2015-3406高 7.5The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be t…
• CVE-2015-3409高 7.2Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under t…
• CVE-2015-3407中 5.0Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the…