CVE-2015-3408
published 2015-05-19CVE-2015-3408: Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when…
PriorityP355critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
5.66%
92.1th percentile
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | libmodule-signature-perl | < libmodule-signature-perl 0.78-1 (bookworm) | libmodule-signature-perl 0.78-1 (bookworm) |
| module-signature_project | module-signature | <= 0.73 | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Module::Signature vulnerabilities
vendor_ubuntu·2015-05-12·CVSS 7.5
CVE-2015-3406 [HIGH] Module::Signature vulnerabilities
Title: Module::Signature vulnerabilities
Summary: Several security issues were fixed in Module::Signature.
John Lightsey discovered that Module::Signature incorrectly handled PGP
signature boundaries. A remote attacker could use this issue to trick
Module::Signature into parsing the unsigned portion of the SIGNATURE file
as the signed portion. (CVE-2015-3406)
John Lightsey discovered that Module::Signature incorrectly handled files
that were not listed in the SIGNATURE file. A remote attacker could use
this flaw to execute arbitrary code when tests were run. (CVE-2015-3407)
John Lightsey discovered that Module::Signature incorrectly handled
embedded shell commands in the SIGNATURE file. A remote attacker could use
this issue to execute arbitrary code during signature verification.
(CVE
Red Hat
perl-Module-Signature: arbitrary code execution when verifying module signatures
vendor_redhat·2015-04-05·CVSS 10.0
CVE-2015-3408 [CRITICAL] CWE-77 perl-Module-Signature: arbitrary code execution when verifying module signatures
perl-Module-Signature: arbitrary code execution when verifying module signatures
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
Package: perl-Module-Signature (Red Hat Enterprise Linux 7) - Will not fix
Debian
CVE-2015-3408: libmodule-signature-perl - Module::Signature before 0.74 allows remote attackers to execute arbitrary shell...
vendor_debian·2015·CVSS 10.0
CVE-2015-3408 [CRITICAL] CVE-2015-3408: libmodule-signature-perl - Module::Signature before 0.74 allows remote attackers to execute arbitrary shell...
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
Scope: local
bookworm: resolved (fixed in 0.78-1)
bullseye: resolved (fixed in 0.78-1)
forky: resolved (fixed in 0.78-1)
sid: resolved (fixed in 0.78-1)
trixie: resolved (fixed in 0.78-1)
GHSA
GHSA-c37j-xf8x-83gh: Module::Signature before 0
ghsa_unreviewed·2022-05-17
CVE-2015-3408 [HIGH] CWE-77 GHSA-c37j-xf8x-83gh: Module::Signature before 0
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
OSV
CVE-2015-3408: Module::Signature before 0
osv·2015-05-19·CVSS 10.0
CVE-2015-3408 [CRITICAL] CVE-2015-3408: Module::Signature before 0
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
OSV
libmodule-signature-perl vulnerabilities
osv·2015-05-12·CVSS 7.5
CVE-2015-3406 [HIGH] libmodule-signature-perl vulnerabilities
libmodule-signature-perl vulnerabilities
John Lightsey discovered that Module::Signature incorrectly handled PGP
signature boundaries. A remote attacker could use this issue to trick
Module::Signature into parsing the unsigned portion of the SIGNATURE file
as the signed portion. (CVE-2015-3406)
John Lightsey discovered that Module::Signature incorrectly handled files
that were not listed in the SIGNATURE file. A remote attacker could use
this flaw to execute arbitrary code when tests were run. (CVE-2015-3407)
John Lightsey discovered that Module::Signature incorrectly handled
embedded shell commands in the SIGNATURE file. A remote attacker could use
this issue to execute arbitrary code during signature verification.
(CVE-2015-3408)
John Lightsey discovered that Module::Signature incorr
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2015-8313 gnutls: First byte of the padding in CBC mode is not checked
bugzilla·2015-12-02·CVSS 4.0
CVE-2015-8313 [MEDIUM] CVE-2015-8313 gnutls: First byte of the padding in CBC mode is not checked
CVE-2015-8313 gnutls: First byte of the padding in CBC mode is not checked
It was discovered that gnutls incorrectly validates the first byte of padding in CBC modes. A remote attacker can possibly take advantage of this flaw to perform a padding oracle attack. Affected are older versions of gnutls (2.x).
Public via:
https://www.debian.org/security/2015/dsa-3408
http://seclists.org/bugtraq/2015/Dec/0
Discussion:
This bug does not affect RHEL-6 or RHEL-7. They have been patched with the proper fixes for Lucky13 which included the fix for that issue.
---
It doesn't affect RHEL-5 either.
---
Details of this issue can be found in the Hanno Böck's blog post:
https://blog.hboeck.de/archives/877-A-little-POODLE-left-in-GnuTLS-old-versions.html
Here is also the original Ubuntu bug repor
Bugzilla
CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures
bugzilla·2015-04-08·CVSS 10.0
CVE-2015-3408 [CRITICAL] CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures
CVE-2015-3408 perl-Module-Signature: arbitrary code execution when verifying module signatures
Module::Signature before version 0.75 used two argument open() calls to read the files when generating checksums from the signed manifest. This allowed embedding arbitrary shell commands into the SIGNATURE file that would execute during the signature verification process.
Upstream fix: https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372f
CVE request: http://seclists.org/oss-sec/2015/q2/59
Discussion:
Created perl-Module-Signature tracking bugs for this issue:
Affects: fedora-all [bug 1209920]
Affects: epel-all [bug 1209922]
---
perl-Module-Signature-0.78-1.fc21, perl-Test-Signature-1.11-1.fc21 has been pushed to the Fedora 21 stable repository. If pro
http://ubuntu.com/usn/usn-2607-1http://www.debian.org/security/2015/dsa-3261http://www.openwall.com/lists/oss-security/2015/04/07/1http://www.openwall.com/lists/oss-security/2015/04/23/17https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372fhttps://metacpan.org/changes/distribution/Module-Signaturehttp://ubuntu.com/usn/usn-2607-1http://www.debian.org/security/2015/dsa-3261http://www.openwall.com/lists/oss-security/2015/04/07/1http://www.openwall.com/lists/oss-security/2015/04/23/17https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372fhttps://metacpan.org/changes/distribution/Module-Signature
2015-05-19
Published