{
"id": "GHSA-6x46-7rrv-m4h8",
"aliases": [
"CVE-2011-0995"
],
"details": "The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.",
"summary": "sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.4"
}
]
}
],
"package": {
"name": "sqlite3-ruby",
"ecosystem": "RubyGems"
}
}
],
"modified": "2023-05-12T16:04:23Z",
"severity": [],
"published": "2017-10-24T18:33:38Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0995",
"type": "ADVISORY"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263",
"type": "WEB"
},
{
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sqlite3-ruby/CVE-2011-0995.yml",
"type": "WEB"
},
{
"url": "https://github.com/schuyler/sqlite3-ruby",
"type": "PACKAGE"
},
{
"url": "https://web.archive.org/web/20110513184951/http://support.novell.com/security/cve/CVE-2011-0995.html",
"type": "WEB"
},
{
"url": "https://web.archive.org/web/20200229151908/http://www.securityfocus.com/bid/47694",
"type": "WEB"
},
{
"url": "https://web.archive.org/web/20201106213407/https://bugzilla.novell.com/show_bug.cgi?id=685928",
"type": "WEB"
},
{
"url": "https://www.suse.com/security/cve/CVE-2011-0995.html",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [],
"severity": "LOW",
"github_reviewed": true,
"nvd_published_at": "2011-05-13T17:05:41Z",
"github_reviewed_at": "2020-06-16T21:20:29Z"
}
}