2.1
CVE-2011-0995
- EPSS 0.38%
- Veröffentlicht 13.05.2011 17:05:41
- Zuletzt bearbeitet 16.06.2026 23:28:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rubyforge ≫ Rubygem-sqlite3 Version <= 1.2.3
Rubyforge ≫ Rubygem-sqlite3 Version1.2.0
Rubyforge ≫ Rubygem-sqlite3 Version1.2.1
Rubyforge ≫ Rubygem-sqlite3 Version1.2.2
Novell ≫ Suse Linux Enterprise Version11 Updatesp1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.38% | 0.294 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/44418
http://support.novell.com/security/cve/CVE-2011-0995.html
http://www.osvdb.org/72180
http://www.securityfocus.com/bid/47694
https://bugzilla.novell.com/show_bug.cgi?id=685928
https://exchange.xforce.ibmcloud.com/vulnerabilities/67263