Module::Signature Multiple Remote Command Execution and Security Bypass Vulnerabilities

Bugtraq ID:	73935
Class:	Input Validation Error
CVE:	CVE-2015-3406 CVE-2015-3407 CVE-2015-3408
Remote:	Yes
Local:	No
Published:	Apr 06 2015 12:00AM
Updated:	Jul 15 2015 12:07AM
Credit:	John Lightsey
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Module::Signature Multiple Remote Command Execution and Security Bypass Vulnerabilities

Module::Signature is prone to multiple remote command-execution and security-bypass vulnerabilities.

An attacker can exploit these issues to bypass security restrictions, execute arbitrary code, and perform unauthorized actions in the context of affected application.

Module::Signature Multiple Remote Command Execution and Security Bypass Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Module::Signature Multiple Remote Command Execution and Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Module::Signature Multiple Remote Command Execution and Security Bypass Vulnerabilities

References: