VYPR
Low severityNVD Advisory· Published May 13, 2011· Updated Apr 29, 2026

CVE-2011-0995

CVE-2011-0995

Description

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
sqlite3-rubyRubyGems
< 1.2.41.2.4

Affected products

5
  • cpe:2.3:a:rubyforge:rubygem-sqlite3:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:rubyforge:rubygem-sqlite3:*:*:*:*:*:*:*:*range: <=1.2.3
    • cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_linux_enterprise:11:sp1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

13

News mentions

0

No linked articles in our index yet.