CVE-2015-3406

Name of the Vulnerable Software and Affected Versions Module::Signature versions prior to 0.74

Description The issue concerns the PGP signature parsing in Module::Signature, allowing remote attackers to manipulate the treatment of signed and unsigned portions of a SIGNATURE file. This is achieved via unspecified vectors.

Recommendations For versions prior to 0.74, update to version 0.74 or later to resolve the issue. As a temporary workaround, consider restricting access to the SIGNATURE file to minimize the risk of exploitation.