Vulnerabilites related to rubyforge - rubygem-sqlite3
Vulnerability from fkie_nvd
Published
2011-05-13 17:05
Modified
2024-11-21 01:25
Severity ?
Summary
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| rubyforge | rubygem-sqlite3 | * | |
| rubyforge | rubygem-sqlite3 | 1.2.0 | |
| rubyforge | rubygem-sqlite3 | 1.2.1 | |
| rubyforge | rubygem-sqlite3 | 1.2.2 | |
| novell | suse_linux_enterprise | 11 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:rubyforge:rubygem-sqlite3:*:*:*:*:*:*:*:*", matchCriteriaId: "02C0AB3C-8690-4843-A88C-72E8569A55A9", versionEndIncluding: "1.2.3", vulnerable: true, }, { criteria: "cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.0:*:*:*:*:*:*:*", matchCriteriaId: "964CF47D-048F-4DEA-BBF8-A018B6C27111", vulnerable: true, }, { criteria: "cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.1:*:*:*:*:*:*:*", matchCriteriaId: "3E52A448-096A-4E18-BDC1-D85DF55CCE84", vulnerable: true, }, { criteria: "cpe:2.3:a:rubyforge:rubygem-sqlite3:1.2.2:*:*:*:*:*:*:*", matchCriteriaId: "01C3D515-76B9-4A86-84F1-832A562CEE7E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:o:novell:suse_linux_enterprise:11:sp1:*:*:*:*:*:*", matchCriteriaId: "C1B8EB92-4ADC-4E2B-990F-331C6D491FE7", vulnerable: true, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.", }, { lang: "es", value: "La gema sqlite3-ruby en el paquete rubygem-sqlite3 antes de v1.2.4-0.5.1 en SUSE Linux Enterprise (SLE) v11 SP1 utiliza permisos débiles para archivos no especificados, lo que permite a usuarios locales conseguir privilegios a través de vectores desconocidos.", }, ], id: "CVE-2011-0995", lastModified: "2024-11-21T01:25:16.310", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "LOW", cvssData: { accessComplexity: "LOW", accessVector: "LOCAL", authentication: "NONE", availabilityImpact: "NONE", baseScore: 2.1, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:L/AC:L/Au:N/C:N/I:P/A:N", version: "2.0", }, exploitabilityScore: 3.9, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2011-05-13T17:05:41.893", references: [ { source: "cve@mitre.org", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/44418", }, { source: "cve@mitre.org", url: "http://support.novell.com/security/cve/CVE-2011-0995.html", }, { source: "cve@mitre.org", url: "http://www.osvdb.org/72180", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/bid/47694", }, { source: "cve@mitre.org", url: "https://bugzilla.novell.com/show_bug.cgi?id=685928", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/44418", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://support.novell.com/security/cve/CVE-2011-0995.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.osvdb.org/72180", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/47694", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugzilla.novell.com/show_bug.cgi?id=685928", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-264", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
cve-2011-0995
Vulnerability from cvelistv5
Published
2011-05-13 17:00
Modified
2024-08-06 22:14
Severity ?
EPSS score ?
Summary
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
References
| ▼ | URL | Tags |
|---|---|---|
| https://bugzilla.novell.com/show_bug.cgi?id=685928 | x_refsource_CONFIRM | |
| http://www.securityfocus.com/bid/47694 | vdb-entry, x_refsource_BID | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/67263 | vdb-entry, x_refsource_XF | |
| http://www.osvdb.org/72180 | vdb-entry, x_refsource_OSVDB | |
| http://secunia.com/advisories/44418 | third-party-advisory, x_refsource_SECUNIA | |
| http://support.novell.com/security/cve/CVE-2011-0995.html | x_refsource_CONFIRM |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T22:14:27.086Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugzilla.novell.com/show_bug.cgi?id=685928", }, { name: "47694", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/47694", }, { name: "sqlite3ruby-file-overwrite(67263)", tags: [ "vdb-entry", "x_refsource_XF", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263", }, { name: "72180", tags: [ "vdb-entry", "x_refsource_OSVDB", "x_transferred", ], url: "http://www.osvdb.org/72180", }, { name: "44418", tags: [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred", ], url: "http://secunia.com/advisories/44418", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://support.novell.com/security/cve/CVE-2011-0995.html", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2011-05-03T00:00:00", descriptions: [ { lang: "en", value: "The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2017-08-16T14:57:01", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://bugzilla.novell.com/show_bug.cgi?id=685928", }, { name: "47694", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/47694", }, { name: "sqlite3ruby-file-overwrite(67263)", tags: [ "vdb-entry", "x_refsource_XF", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263", }, { name: "72180", tags: [ "vdb-entry", "x_refsource_OSVDB", ], url: "http://www.osvdb.org/72180", }, { name: "44418", tags: [ "third-party-advisory", "x_refsource_SECUNIA", ], url: "http://secunia.com/advisories/44418", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://support.novell.com/security/cve/CVE-2011-0995.html", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2011-0995", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://bugzilla.novell.com/show_bug.cgi?id=685928", refsource: "CONFIRM", url: "https://bugzilla.novell.com/show_bug.cgi?id=685928", }, { name: "47694", refsource: "BID", url: "http://www.securityfocus.com/bid/47694", }, { name: "sqlite3ruby-file-overwrite(67263)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/67263", }, { name: "72180", refsource: "OSVDB", url: "http://www.osvdb.org/72180", }, { name: "44418", refsource: "SECUNIA", url: "http://secunia.com/advisories/44418", }, { name: "http://support.novell.com/security/cve/CVE-2011-0995.html", refsource: "CONFIRM", url: "http://support.novell.com/security/cve/CVE-2011-0995.html", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2011-0995", datePublished: "2011-05-13T17:00:00", dateReserved: "2011-02-14T00:00:00", dateUpdated: "2024-08-06T22:14:27.086Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }