sqlite3-ruby uses weak permissions for unspecified files, which allows local users to gain privileges (GHSA-6x46-7rrv-m4h8)
Published: 2017-10-24T18:33:38Z
Aliases: CVE-2011-0995
Severity: LOW · CWE: 

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise (SLE) 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.

Affected packages:
package: ecosystem: RubyGems
name: sqlite3-ruby
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.2.4