CVE-2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via...

3.6 LowFix available

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Exploit likelihood

0.52%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 3.6

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2014-1875
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2014-1875
Updated: 2026-11-02

EUVDEUVD-2014-1937 No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: EUVD-2014-1937
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mx62-7r33-gq29 No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via...

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: GHSA-mx62-7r33-gq29
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2014-1875
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-1875 No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: DEBIAN-CVE-2014-1875
Updated: 2026-11-02

OSVMGASA-2014-0068 No score

Updated perl-Capture-Tiny package fixes security vulnerability

perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner (CVE-2014-1875).

Record: MGASA-2014-0068
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-1875 No score

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: UBUNTU-CVE-2014-1875
Updated: 2026-11-02

Affected products

cspan capture-tiny

Affected packages

Affected packages
Package	Affected	Fixed
`libcapture-tiny-perl` Debian:12	before 0.24-1	0.24-1
`libcapture-tiny-perl` Debian:13	before 0.24-1	0.24-1
`libcapture-tiny-perl` Debian:14	before 0.24-1	0.24-1
`perl-Capture-Tiny` Mageia:3	before 0.210.0-2.1.mga3	0.210.0-2.1.mga3
`perl-Capture-Tiny` Mageia:4	before 0.220.0-2.1.mga4	0.220.0-2.1.mga4

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-1875 is a low vulnerability (CVSS 3.6) in Cspan Capture-tiny, published February 13, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in libcapture-tiny-perl 0.24-1.

References

Show 14 moreShow less