NVD

Id
25251  
Name
CVE-2015-3407  
Description
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2015-05-20  
Seq
2015-3407  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133554 25251 CVE-2015-3407 USN-2607-1  View
133555 25251 CVE-2015-3407 [oss-security] 20150406 CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133556 25251 CVE-2015-3407 [oss-security] 20150423 Re: CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133557 25251 CVE-2015-3407 https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f  View
133558 25251 CVE-2015-3407 https://metacpan.org/changes/distribution/Module-Signature  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7417 JVNDB-2015-002737 Module::Signature におけるファイルの署名の検証を回避される脆弱性 Module::Signature には、ファイルの署名の検証を回避される脆弱性が存在します。 CVE-2015-3407 80632 CVE-2015-3407 25251 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002737.html 2015-04-05 2015-05-21 View