CVE

Id
80686  
CVE No.
CVE-2015-3409  
Status
Candidate  
Description
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.  
Phase
Assigned (20150423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
729389 80686 CVE-2015-3409 MLIST:[oss-security] 20150406 CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
729390 80686 CVE-2015-3409 URL:http://www.openwall.com/lists/oss-security/2015/04/07/1  View
729391 80686 CVE-2015-3409 MLIST:[oss-security] 20150423 Re: CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
729392 80686 CVE-2015-3409 URL:http://www.openwall.com/lists/oss-security/2015/04/23/17  View
729393 80686 CVE-2015-3409 CONFIRM:https://github.com/audreyt/module-signature/commit/c41e8885b862b9fce2719449bc9336f0bea658ef  View
729394 80686 CVE-2015-3409 CONFIRM:https://metacpan.org/changes/distribution/Module-Signature  View
729395 80686 CVE-2015-3409 UBUNTU:USN-2607-1  View
729396 80686 CVE-2015-3409 URL:http://ubuntu.com/usn/usn-2607-1  View
729397 80686 CVE-2015-3409 BID:73937  View

Related JVN