ubuntu · CVE-2015-3409

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-3409 medium priority: Ubuntu including 1 source packages (libmodule-signature-perl), 6 status rows across 6 suites (lucid, precise, trusty, upstream, utopic, vivid): released 5, ignored 1.

Description:

Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working directory, as demonstrated by a Trojan horse Text::Diff module.