CVE-2011-0995

Published: May 13, 2011Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

Affected (5)

Products: Rubyforge: Rubygem Sqlite3 · Novell: Suse Linux Enterprise

1 product

Rubygem Sqlite3

1 product

Suse Linux Enterprise

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Rubyforge Rubygem Sqlite3	Up to 1.2.3
Rubyforge Rubygem Sqlite3	Version 1.2.0
Rubyforge Rubygem Sqlite3	Version 1.2.1
Rubyforge Rubygem Sqlite3	Version 1.2.2
Novell Suse Linux Enterprise	Version 11 sp1

Related CWEs

References (12)

http://secunia.com/advisories/44418

Source: cve@mitre.org

Vendor Advisory

http://support.novell.com/security/cve/CVE-2011-0995.html

Source: cve@mitre.org

http://www.osvdb.org/72180

Source: cve@mitre.org

http://www.securityfocus.com/bid/47694

Source: cve@mitre.org

https://bugzilla.novell.com/show_bug.cgi?id=685928

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/67263

Source: cve@mitre.org

http://secunia.com/advisories/44418

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.novell.com/security/cve/CVE-2011-0995.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/72180

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47694

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=685928

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/67263

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.