NVD

Id
30416  
Name
CVE-2014-1875  
Description
The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-06  
Modified Date
2014-10-07  
Seq
2014-1875  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160920 30416 CVE-2014-1875 http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes  View
160921 30416 CVE-2014-1875 FEDORA-2014-2261  View
160922 30416 CVE-2014-1875 FEDORA-2014-2321  View
160923 30416 CVE-2014-1875 [oss-security] 20140206 CVE Request: Capture::Tiny: insecure use of /tmp  View
160924 30416 CVE-2014-1875 [oss-security] 20140206 Re: CVE Request: Capture::Tiny: insecure use of /tmp  View
160925 30416 CVE-2014-1875 65475  View
160926 30416 CVE-2014-1875 capturetiny-perl-symlink(91464)  View
160927 30416 CVE-2014-1875 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737835  View
160928 30416 CVE-2014-1875 https://bugzilla.redhat.com/show_bug.cgi?id=1062424  View
160929 30416 CVE-2014-1875 https://github.com/dagolden/Capture-Tiny/commit/635c9eabd52ab8042b0c841823bd6e692de87924  View
160930 30416 CVE-2014-1875 https://github.com/dagolden/Capture-Tiny/issues/16  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15714 JVNDB-2014-004589 Perl 用 Capture::Tiny モジュールにおける任意のファイルに書き込まれる脆弱性 Perl 用 Capture::Tiny モジュールには、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2014-1875 69162 CVE-2014-1875 30416 3.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004589.html 2014-02-06 2014-10-09 View