CVE-2013-2145 in Perl
요약 (영어)
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.
예약하다
2013. 02. 19.
공개
2013. 08. 19.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 9060 | Perl CPAN Module::Signature 권한 상승 | 20 | 개념 증명 | 공식 수정 | CVE-2013-2145 |