CVE-2015-3406

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.

• CWE-681

• http://ubuntu.com/usn/usn-2607-1Patch, Release Notes, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/04/07/1Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/04/23/17Mailing List, Patch, Third Party Advisory
• https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372fPatch, Third Party Advisory
• https://metacpan.org/changes/distribution/Module-SignatureRelease Notes, Vendor Advisory
• http://ubuntu.com/usn/usn-2607-1Patch, Release Notes, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/04/07/1Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/04/23/17Mailing List, Patch, Third Party Advisory
• https://github.com/audreyt/module-signature/commit/8a9164596fa5952d4fbcde5aa1c7d1c7bc85372fPatch, Third Party Advisory
• https://metacpan.org/changes/distribution/Module-SignatureRelease Notes, Vendor Advisory

Published

Nov 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3393Open redirect vulnerability in the Commerce WeDeal module be…
• CVE-2015-3395The msrle_decode_pal4 function in msrledec.c in Libav before…
• CVE-2015-3397Cross-site scripting (XSS) vulnerability in Yii Framework be…
• CVE-2015-3400sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 …
• CVE-2015-3404The Certify module before 6.x-2.3 for Drupal does not proper…
• CVE-2015-3405ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x befor…
• CVE-2015-3407Module::Signature before 0.74 allows remote attackers to byp…
• CVE-2015-3408Module::Signature before 0.74 allows remote attackers to exe…
• CVE-2015-3409Untrusted search path vulnerability in Module::Signature bef…
• CVE-2015-3411PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6…
• CVE-2015-3412PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6…
• CVE-2015-3414SQLite before 3.8.9 does not properly implement the dequotin…