Vulnerabilities (CVE)

Filtered by vendor Module-signature Project Subscribe

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 3 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2015-3407	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2017-11-04	5.0 MEDIUM	N/A
Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.
CVE-2015-3408	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2017-11-04	10.0 HIGH	N/A
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
CVE-2015-3409	2 Canonical, Module-signature Project	2 Ubuntu Linux, Module-signature	2017-11-04	7.2 HIGH	N/A
Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.