CVE-2015-3409 — Improper Input Validation in Libmodule-signature-perl
Severity
7.2HIGHNVD
OSV7.5
EPSS
0.1%
top 82.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 19
Latest updateMay 17
Description
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.
CVSS vector
AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0
Affected Packages2 packages
Also affects: Ubuntu Linux 12.04, 14.04, 14.10, 15.04
🔴Vulnerability Details
3📋Vendor Advisories
3💬Community
1Bugzilla
▶