CVE-2011-0995
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
CVE-2011-0995- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
CVE-2011-0995- Updated
- 2026-11-02
EUVDEUVD-2017-0179 No score
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
EUVD-2017-0179- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6x46-7rrv-m4h8 No score
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
GHSA-6x46-7rrv-m4h8- Updated
- 2026-11-02
OSVGHSA-6x46-7rrv-m4h8 No score
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
GHSA-6x46-7rrv-m4h8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sqlite3-rubyRubyGems |
before 1.2.4 | 1.2.4 |
sqlite3-rubyRubyGems |
before 1.2.4, plus listed versions 0.5.00.6.00.9.01.0.01.0.1 Show 5 moreShow less1.1.01.2.01.2.11.2.21.2.3 |
1.2.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0995 is a low vulnerability (CVSS 2.1) in Novell Suse Linux Enterprise, published May 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in sqlite3-ruby 1.2.4.
References
bugzilla.novell.com/show_bug.cgi?id=685928
securityfocus.com/bid/47694
exchange.xforce.ibmcloud.com/vulnerabilities/67263
osvdb.org/72180
secunia.com/advisories/44418
support.novell.com/security/cve/CVE-2011-0995.html
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-0995
github.com/rubysec/ruby-advisory-db/blob/master/gems/sqlite3-ruby/CVE-2011-0995.yml
web.archive.org/web/20110513184951/http://support.novell.com/security/cve/CVE-2011-0995.html
suse.com/security/cve/CVE-2011-0995.html