CVE-2015-3408

High

Published: 19/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update the Module::Signature to version 0.74 or later to mitigate this vulnerability.

Other vulnerabilities in Module::Signature

CVE-2015-3409High
The vulnerability in Module::Signature before version 0.75 allows local users to gain privileges via a malicious module in the current working directory.

Original NVD description (English source)

Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.