CVE-2011-0995
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
CVE-2011-0995 is a low vulnerability (CVSS 2.1) in Novell Suse Linux Enterprise, published May 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in sqlite3-ruby 1.2.4.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 32nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.2.4sqlite3-ruby +1 more
Description
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sqlite3-rubyRubyGems | before 1.2.4 | 1.2.4 |
sqlite3-rubyRubyGems | before 1.2.4, plus listed versions 0.5.00.6.00.9.01.0.01.0.1 Show 5 moreShow less1.1.01.2.01.2.11.2.21.2.3 | 1.2.4 |
What each source reports
NVD Score used
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
CVE-2011-0995- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
CVE-2011-0995- Updated
- 2026-11-02
EUVDEUVD-2017-0179No score
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
EUVD-2017-0179- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6x46-7rrv-m4h8No score
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
GHSA-6x46-7rrv-m4h8- Updated
- 2026-11-02
OSVGHSA-6x46-7rrv-m4h8No score
sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
- Record
GHSA-6x46-7rrv-m4h8- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.novell.com/show_bug.cgi?id=685928
securityfocus.com/bid/47694
exchange.xforce.ibmcloud.com/vulnerabilities/67263
osvdb.org/72180
secunia.com/advisories/44418
support.novell.com/security/cve/CVE-2011-0995.html
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-0995
github.com/rubysec/ruby-advisory-db/blob/master/gems/sqlite3-ruby/CVE-2011-0995.yml
web.archive.org/web/20110513184951/http://support.novell.com/security/cve/CVE-2011-0995.html
suse.com/security/cve/CVE-2011-0995.html