CVE-2015-3409

High

Published: 19/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The vulnerability in Module::Signature before version 0.75 allows local users to gain privileges via a malicious module in the current working directory.

Risk Assessment

Organizations may be exposed to unauthorized access and privilege escalation by local users, potentially leading to serious security breaches.

Recommendation

It is recommended to update Module::Signature to version 0.75 or later and to monitor working directories for malicious modules.

Other vulnerabilities in Module::Signature

CVE-2015-3408High
Module::Signature before 0.74 allows remote attackers to execute arbitrary shell commands via a crafted SIGNATURE file which is not properly handled when generating checksums from a signed manifest.

Original NVD description (English source)

Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.