Unscored severity · published May 13, 2011
CVE-2011-0995
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Rubygem-sqlite3 · Rubyforge
through 1.2.3; 1.2.0; 1.2.1; 1.2.2 · source: NVD
SL
Suse Linux Enterprise · Novell
11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0995
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0995
Vendor Advisory
http://secunia.com/advisories/44418
support.novell.com
http://support.novell.com/security/cve/CVE-2011-0995.html
www.osvdb.org
http://www.osvdb.org/72180
www.securityfocus.com
http://www.securityfocus.com/bid/47694
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=685928
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/67263