Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2013-2145
Description:The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.
Test IDs: 1.3.6.1.4.1.25623.1.1.10.2013.0184   1.3.6.1.4.1.25623.1.0.121039   1.3.6.1.4.1.25623.1.0.866016   1.3.6.1.4.1.25623.1.0.865945   1.3.6.1.4.1.25623.1.0.841497  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-2145
BugTraq ID: 60352
http://www.securityfocus.com/bid/60352
https://bugzilla.redhat.com/show_bug.cgi?id=971096
http://www.openwall.com/lists/oss-security/2013/06/05/16
SuSE Security Announcement: openSUSE-SU-2013:1178 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-07/msg00039.html
SuSE Security Announcement: openSUSE-SU-2013:1185 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-07/msg00043.html
http://www.ubuntu.com/usn/USN-1896-1




© 1998-2025 E-Soft Inc. All rights reserved.