Module Signature

module-signature

Vendor: Module Signature Project • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-3406 2Canonical Module Signature Project 2Module Signature Ubuntu Linux Nov 21, 2024 Nov 29, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.
CVE-2015-3409 2Canonical Module Signature Project 2Module Signature Ubuntu Linux May 6, 2026 May 19, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff modul...Show more Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.Show less
CVE-2015-3408 2Canonical Module Signature Project 2Module Signature Ubuntu Linux May 6, 2026 May 19, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.
CVE-2015-3407 2Canonical Module Signature Project 2Module Signature Ubuntu Linux May 6, 2026 May 19, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files.