GitHub Advisory DatabaseGHSA-6X46-7RRV-M4H8sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
19.8%
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| * | sqlite3-ruby | * | cpe:2.3:a:*:sqlite3-ruby:*:*:*:*:*:*:*:* |
References
exchange.xforce.ibmcloud.com/vulnerabilities/67263
github.com/advisories/GHSA-6x46-7rrv-m4h8
github.com/rubysec/ruby-advisory-db/blob/master/gems/sqlite3-ruby/CVE-2011-0995.yml
nvd.nist.gov/vuln/detail/CVE-2011-0995
web.archive.org/web/20110513184951/support.novell.com/security/cve/CVE-2011-0995.html
web.archive.org/web/20200229151908/www.securityfocus.com/bid/47694
web.archive.org/web/20201106213407/https://bugzilla.novell.com/show_bug.cgi?id=685928
www.suse.com/security/cve/CVE-2011-0995.html
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
19.8%