CVE-2011-0995 in rubygem-sqlite3

Riassunto

di MITRE

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 14/02/2011
• Divulgazione: 13/05/2011
• Moderazione: accettato
• Voce: VDB-57419
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 2.1 (NVD)
• EPSS: 0.00378
• KEV: no
• Attività: molto basso
• Settore: Education, Chemical, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0995
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0995
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0995/