Launchpad.net

CVE 2014-1875

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

See the CVE page on Mitre.org for more details.