CVE-2013-2145
Description
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a special unknown cipher that references an untrusted module in Digest/.
Risk Information
Base Score
9.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.198
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| module to manipulate CPAN SIGNATURE files (USN-1896-1) libmodule-signature-perl_0.68-1ubuntu0.12.04.2_all.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234