Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.6

Capture::Tiny Perl Module Temp File Write Vulnerability

CVE-2014-1875 · published 12 years ago
Summary

The Capture::Tiny module in Perl creates temporary files that can be exploited by local users to write to arbitrary files on the system. This could allow an attacker to potentially disrupt system functionality or steal sensitive data. Update the Capture::Tiny module to version 0.24 or later to fix this issue.

What to do
  • Update debian libcapture-tiny-perl to version 0.24-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian libcapture-tiny-perl < 0.24-1
Fix: upgrade to 0.24-1
Debian:12 debian libcapture-tiny-perl < 0.24-1
Fix: upgrade to 0.24-1
Debian:13 debian libcapture-tiny-perl < 0.24-1
Fix: upgrade to 0.24-1
Debian:14 debian libcapture-tiny-perl < 0.24-1
Fix: upgrade to 0.24-1
– cspan capture-tiny <= 0.23
0.20
0.21
0.22
cpe:2.3:a:cspan:capture-tiny:*:*:*:*:*:*:*:*
Original advisory text
The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
References
Severity
3.6 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-59Link Following
Timeline
Published6 Oct 2014
Updated4 Nov 2026
First seen8 Aug 2026
Sources
DEBIAN-CVE-2014-1875 · OSV
CVE-2014-1875 · NVD
Track software like this
Free during beta