CVE-2014-1875 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	3.6 UNKNOWN	LOCAL	LOW		AV:L/AC:L/Au:N/C:N/I:P/A:P
debian	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 24%

Vendor	Product	Version
cspan	capture-tiny	𝑥 ≤ 0.23
cspan	capture-tiny	0.20
cspan	capture-tiny	0.21
cspan	capture-tiny	0.22

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libcapture-tiny-perl

bullseye	0.48-1 fixed
wheezy	no-dsa
squeeze	no-dsa
sid	0.48-2 fixed
trixie	0.48-2 fixed
bookworm	0.48-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

libcapture-tiny-perl

zesty	not-affected
yakkety	not-affected
xenial	not-affected
wily	not-affected
vivid	not-affected
utopic	not-affected
trusty	dne
saucy	ignored
quantal	ignored
precise	ignored
lucid	ignored

Known Exploits!

Common Weakness Enumeration

CWE-59 - Improper Link Resolution Before File Access ('Link Following')
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References

http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128823.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128882.html

http://osvdb.org/102963

http://seclists.org/oss-sec/2014/q1/267

http://seclists.org/oss-sec/2014/q1/272

http://secunia.com/advisories/56823

http://www.securityfocus.com/bid/65475

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737835

https://bugzilla.redhat.com/show_bug.cgi?id=1062424

https://exchange.xforce.ibmcloud.com/vulnerabilities/91464

https://github.com/dagolden/Capture-Tiny/commit/635c9eabd52ab8042b0c841823bd6e692de87924

https://github.com/dagolden/Capture-Tiny/issues/16

http://cpansearch.perl.org/src/DAGOLDEN/Capture-Tiny-0.24/Changes

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128823.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128882.html

http://osvdb.org/102963

http://seclists.org/oss-sec/2014/q1/267

http://seclists.org/oss-sec/2014/q1/272

http://secunia.com/advisories/56823

http://www.securityfocus.com/bid/65475

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737835

https://bugzilla.redhat.com/show_bug.cgi?id=1062424

https://exchange.xforce.ibmcloud.com/vulnerabilities/91464

https://github.com/dagolden/Capture-Tiny/commit/635c9eabd52ab8042b0c841823bd6e692de87924

https://github.com/dagolden/Capture-Tiny/issues/16