CVE-2005-3631
udev does not properly set permissions on certain files in /dev/input, which allows local users...
CVE-2005-3631 is a medium vulnerability (CVSS 4.6) in Redhat Enterprise Linux, published December 22, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in udev 0:039-10.10.EL4.3.
- Severity
- 4.6 MediumCVSS 2.0, NVD
- Exploit chance
- 0.39%EPSS, 33rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:039-10.10.EL4.3udev +7 more
Description
udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
udevRed Hat:enterprise_linux:4::as | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udev-debuginfoRed Hat:enterprise_linux:4::as | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udevRed Hat:enterprise_linux:4::desktop | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udev-debuginfoRed Hat:enterprise_linux:4::desktop | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udevRed Hat:enterprise_linux:4::es | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udev-debuginfoRed Hat:enterprise_linux:4::es | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udevRed Hat:enterprise_linux:4::ws | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
udev-debuginfoRed Hat:enterprise_linux:4::ws | before 0:039-10.10.EL4.3 | 0:039-10.10.EL4.3 |
What each source reports
NVD Score used
udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
- Record
CVE-2005-3631- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
- Record
CVE-2005-3631- Updated
- 2026-11-02
EUVDEUVD-2005-3628No score
udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
- Record
EUVD-2005-3628- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g35h-r364-qwcmNo score
udev does not properly set permissions on certain files in /dev/input, which allows local users...
udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
- Record
GHSA-g35h-r364-qwcm- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1015386
securityfocus.com/bid/15994
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10854
redhat.com/support/errata/RHSA-2005-864.html
secunia.com/advisories/18193
nvd.nist.gov/vuln/detail/CVE-2005-3631
Show 8 moreShow less
github.com/advisories/GHSA-g35h-r364-qwcm
access.redhat.com/errata/RHSA-2005:864
bugzilla.redhat.com/show_bug.cgi?id=174845
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_864.json
cve.org/CVERecord?id=CVE-2005-3631