CVE-2011-0995

2011-05-1317:05:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2011-0995

sqlite3-ruby

rubygem-sqlite3

suse linux enterprise

weak permissions

local users

gain privileges

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

19.4%

JSON

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

CPENameOperatorVersion
rubyforge:rubygem-sqlite3rubyforge rubygem-sqlite3le1.2.3
rubyforge:rubygem-sqlite3rubyforge rubygem-sqlite3eq1.2.0
rubyforge:rubygem-sqlite3rubyforge rubygem-sqlite3eq1.2.1
rubyforge:rubygem-sqlite3rubyforge rubygem-sqlite3eq1.2.2
novell:suse_linux_enterprisenovell suse linux enterpriseeq11

CPE	Name	Operator	Version
rubyforge:rubygem-sqlite3	rubyforge rubygem-sqlite3	le	1.2.3
rubyforge:rubygem-sqlite3	rubyforge rubygem-sqlite3	eq	1.2.0
rubyforge:rubygem-sqlite3	rubyforge rubygem-sqlite3	eq	1.2.1
rubyforge:rubygem-sqlite3	rubyforge rubygem-sqlite3	eq	1.2.2
novell:suse_linux_enterprise	novell suse linux enterprise	eq	11