CVEvulnerability

CVE-2015-3409

7.2 HIGH Published 2015-05-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-05-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.

Affected configurations

• module-signature project module-signature (<= 0.74) • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 14.10 • canonical ubuntu linux 15.04

References