PT-2007-1506 · Linux+2 · Linux Kernel+2

Daniel Roethlisberger · Publicado 2007-03-10 · Atualizado 2018-10-16 · CVE-2007-0005

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.21-rc3

Description The issue is related to multiple buffer overflows in the read and write handlers in the Omnikey CardMan 4040 driver. This allows local users to gain privileges.

Recommendations For versions prior to 2.6.21-rc3, update to version 2.6.21-rc3 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-0005

DSA-1286-1

RHSA-2007:0099

RHSA-2007_0099

Produtos afetados

Linux Kernel

Omnikey Cardman 4040

Red Hat

Referências · 35

• 🔥 https://exploit-db.com/exploits/3441 · Exploit
• http://fedoranews.org/cms/node/2787 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-486-1 · Aviso do Fabricante
• http://secunia.com/advisories/24518 · Aviso do Fabricante
• http://fedoranews.org/cms/node/2788 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04885 · Nota de Segurança
• http://securityfocus.com/archive/1/462300/100/0/threaded · Nota
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc3 · Aviso do Fabricante
• http://secunia.com/advisories/25691 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2007-0099.html · Aviso do Fabricante
• http://secunia.com/advisories/24436 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2007:0099 · Nota
• https://issues.rpath.com/browse/RPL-1035 · Nota
• https://bdu.fstec.ru/vul/2015-04886 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11238 · Nota