Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0995
HistoryMay 13, 2011 - 12:00 a.m.

CVE-2011-0995

2011-05-1300:00:00
ubuntu.com
ubuntu.com
5

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

19.8%

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in
SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified
files, which allows local users to gain privileges via unknown vectors.

Notes

Author Note
sbeattie SLES only

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

19.8%