Description
The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libcapture-tiny-perl | 0.24-1 | — |
| Debian 13 | libcapture-tiny-perl | 0.24-1 | — |
| Debian 12 | libcapture-tiny-perl | 0.24-1 | — |
References
- 65475 vdb-entry
- capturetiny-perl-symlink(91464) vdb-entry
- 56823 third-party-advisory
- FEDORA-2014-2261 vendor-advisory
- 102963 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1062424
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737835
- FEDORA-2014-2321 vendor-advisory
- [oss-security] 20140206 CVE Request: Capture::Tiny: insecure use of /tmp mailing-list
- http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes
- [oss-security] 20140206 Re: CVE Request: Capture::Tiny: insecure use of /tmp mailing-list
- https://github.com/dagolden/Capture-Tiny/commit/635c9eabd52ab8042b0c841823bd6e692de87924
- https://github.com/dagolden/Capture-Tiny/issues/16