ISOMAN

CVE

CVE-2015-3408

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

Severity
HIGH
CVSS
10
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://ubuntu.com/usn/usn-2607-1
  2. http://www.debian.org/security/2015/dsa-3261
  3. http://www.openwall.com/lists/oss-security/2015/04/07/1
  4. http://www.openwall.com/lists/oss-security/2015/04/23/17
  5. https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f
  6. https://metacpan.org/changes/distribution/Module-Signature
  7. http://ubuntu.com/usn/usn-2607-1
  8. http://www.debian.org/security/2015/dsa-3261
  9. http://www.openwall.com/lists/oss-security/2015/04/07/1
  10. http://www.openwall.com/lists/oss-security/2015/04/23/17
  11. https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f
  12. https://metacpan.org/changes/distribution/Module-Signature