NVD

Id
25252  
Name
CVE-2015-3408  
Description
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2015-05-20  
Seq
2015-3408  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133559 25252 CVE-2015-3408 USN-2607-1  View
133560 25252 CVE-2015-3408 [oss-security] 20150406 CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133561 25252 CVE-2015-3408 [oss-security] 20150423 Re: CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133562 25252 CVE-2015-3408 https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f  View
133563 25252 CVE-2015-3408 https://metacpan.org/changes/distribution/Module-Signature  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7418 JVNDB-2015-002738 Module::Signature における任意のシェルコマンドを実行される脆弱性 Module::Signature には、任意のシェルコマンドを実行される脆弱性が存在します。 CVE-2015-3408 80633 CVE-2015-3408 25252 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002738.html 2015-04-05 2015-05-21 View