CVE-2013-2145

CVE-2013-2145 describes a vulnerability in the cpansign verify functionality of the Perl Module::Signature module prior to version 0.72, affecting various distributions including Canonical, openSUSE, and Perlmonks. An attacker can bypass signature checks and execute arbitrary code by crafting a malicious SIGNATURE file that references an untrusted module. With a CVSS score of 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P), this vulnerability requires local access and medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.