Description
The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | sqlite3-ruby | < 1.2.4 | 1.2.4 | GHSA-6x46-7rrv-m4h8 |
References
- https://bugzilla.novell.com/show_bug.cgi?id=685928
- 47694 vdb-entry
- sqlite3ruby-file-overwrite(67263) vdb-entry
- 72180 vdb-entry
- 44418 third-party-advisory
- http://support.novell.com/security/cve/CVE-2011-0995.html