Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

udev: insecure files in /dev/input

Package(s):

udev

CVE #(s):

CVE-2005-3631

Created:

December 20, 2005

Updated:

February 28, 2006

Description:

Richard Cunningham discovered a flaw in the way udev sets permissions on various files in /dev/input. It may be possible for an authenticated attacker to gather sensitive data entered by a user at the console, such as passwords.

Alerts:

Fedora-Legacy	FLSA:175818	2006-02-27
Red Hat	RHSA-2005:864-01	2005-12-20

(Log in to post comments)