Vulnerabilities (CVE)

Filtered by vendor Module-signature Project Subscribe

Filtered by product Module-signature

Total 4 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2015-3409	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2024-11-21	7.2 HIGH	N/A
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.
CVE-2015-3408	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2024-11-21	10.0 HIGH	N/A
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
CVE-2015-3407	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2024-11-21	5.0 MEDIUM	N/A
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.
CVE-2015-3406	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2024-11-21	6.4 MEDIUM	7.5 HIGH
The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.