CVE-2013-2145 in Perl

Resumen (Inglés)

The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2013-02-19

Divulgación

2013-08-19

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
9060	Perl CPAN Module::Signature escalada de privilegios	20	Prueba de concepto	Arreglo oficial	CVE-2013-2145

Fuentes

• MITRE
• NVD
• CVE Details