CVE-2013-2145

Related Files

Gentoo Linux Security Advisory 201310-01

Posted Oct 4, 2013

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201310-1 - The Module-Signature module for Perl has insufficient path checks, allowing a remote attacker to execute arbitrary Perl code. Versions prior to 0.720.0 are affected.

tags | advisory, remote, arbitrary, perl

systems | linux, gentoo

advisories | CVE-2013-2145

SHA-256 | d76431bf795a9a68e8e81a1cf6605346ceaf60cda57f5cf6b58e47871ba66919

Download | Favorite | View

Ubuntu Security Notice USN-1896-1

Posted Jul 3, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1896-1 - Florian Weimer discovered that the Module::Signature perl module incorrectly loaded unknown ciphers from relative directories. An attacker could possibly use this flaw to execute arbitrary code when a signature is verified.

tags | advisory, arbitrary, perl

systems | linux, ubuntu

advisories | CVE-2013-2145

SHA-256 | cd9b66aa4310380ddd651277bec994c6ab25f0629793f8f40a7b052a5a172fe4

Download | Favorite | View

Mandriva Linux Security Advisory 2013-185

Posted Jun 27, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-185 - Updated perl-Module-Signature package fixes CVE-2013-2145. Arbitrary code execution vulnerability in Module::Signature before 0.72.

tags | advisory, arbitrary, perl, code execution

systems | linux, mandriva

advisories | CVE-2013-2145

SHA-256 | c7e5d5ed176a33a19145b6155e1725b3cb982169c35e3e86fd5f5833bf0d01e6

Download | Favorite | View