CVE-2011-0995 sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
LowCVSS 2.1
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems sqlite3-ruby(RubyGems) | < 1.2.4 | 1.2.4 |
| rubygems sqlite3-ruby(RubyGems) | = 0.5.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 0.6.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 0.9.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.0.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.0.1 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.1.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.2.0 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.2.1 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.2.2 | No fix listed |
| rubygems sqlite3-ruby(RubyGems) | = 1.2.3 | No fix listed |
| rubyforge rubygem-sqlite3 | <= 1.2.3 | No fix listed |
| rubyforge rubygem-sqlite3 | = 1.2.0 | No fix listed |
| rubyforge rubygem-sqlite3 | = 1.2.1 | No fix listed |
| rubyforge rubygem-sqlite3 | = 1.2.2 | No fix listed |
| novell suse linux enterprise | = 11-sp1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- sqlite3ruby-file-overwrite(67263) vdb-entry
- github.com exploit
- web.archive.org
- web.archive.org
- web.archive.org
- www.suse.com
- github.com
- github.com product
- 44418 third-party-advisory vendor-advisory
- support.novell.com
- 72180 vdb-entry
- 47694 vdb-entry
- bugzilla.novell.com
- Debian Security Tracker CVE-2011-0995 vendor-advisory