sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges

BASSO 2.1CVE-2011-0995 · GHSA-6x46-7rrv-m4h8 · Published 13/05/2011 · updated 16/06/2026

In breve

CVE-2011-0995 è una vulnerabilità BASSO (CVSS 2.1) che riguarda sqlite3-ruby, rubygem-sqlite3 (rubyforge).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.38%, superiore al 31.8% delle vulnerabilità.
Correzione: aggiornare a 1.2.4 o successiva.

Package	Affected versions	Patched versions
sqlite3-ruby RubyGems	`< 1.2.4`	`1.2.4`
rubygem-sqlite3 rubyforge	`= 1.2.0= 1.2.1= 1.2.2≤ 1.2.3`	No fix yet

Description

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2011-0995 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/67263 · WEB
rubysec/ruby-advisory-db · WEB
schuyler/sqlite3-ruby · PACKAGE
web.archive.org/web/20110513184951/http://support.novell.com/security/cve/CVE-2011-0995.html · WEB
web.archive.org/web/20200229151908/http://www.securityfocus.com/bid/47694 · WEB
web.archive.org/web/20201106213407/https://bugzilla.novell.com/show_bug.cgi · WEB
suse.com/security/cve/CVE-2011-0995.html · WEB
secunia.com/advisories/44418 · Vendor Advisory
support.novell.com/security/cve/CVE-2011-0995.html
osvdb.org/72180

Altre vulnerabilità di sqlite3-ruby

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free