NVD

Id
25253  
Name
CVE-2015-3409  
Description
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2015-06-25  
Seq
2015-3409  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133564 25253 CVE-2015-3409 USN-2607-1  View
133565 25253 CVE-2015-3409 [oss-security] 20150406 CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133566 25253 CVE-2015-3409 [oss-security] 20150423 Re: CVE request: Module::Signature before 0.75 - multiple vulnerabilities  View
133567 25253 CVE-2015-3409 73937  View
133568 25253 CVE-2015-3409 https://github.com/audreyt/module-signature/commit/c41e8885b862b9fce2719449bc9336f0bea658ef  View
133569 25253 CVE-2015-3409 https://metacpan.org/changes/distribution/Module-Signature  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7419 JVNDB-2015-002739 Module::Signature における権限を取得される脆弱性 Module::Signature には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2015-3409 80634 CVE-2015-3409 25253 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002739.html 2015-04-07 2015-05-21 View