sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2011-0995 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/67263 · WEB
• rubysec/ruby-advisory-db · WEB
• schuyler/sqlite3-ruby · PACKAGE
• web.archive.org/web/20110513184951/http://support.novell.com/security/cve/CVE-2011-0995.html · WEB
• web.archive.org/web/20200229151908/http://www.securityfocus.com/bid/47694 · WEB
• web.archive.org/web/20201106213407/https://bugzilla.novell.com/show_bug.cgi · WEB
• suse.com/security/cve/CVE-2011-0995.html · WEB
• secunia.com/advisories/44418 · Vendor Advisory
• support.novell.com/security/cve/CVE-2011-0995.html
• osvdb.org/72180

sqlite3-ruby のその他の脆弱性

• CVE-2026-54620低 2.0sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can…
• CVE-2026-54619低 2.0sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a differen…