PT-2007-1506 · Linux+2 · Linux Kernel+2

Daniel Roethlisberger · Published 2007-03-10 · Updated 2018-10-16 · CVE-2007-0005

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.21-rc3

Description The issue is related to multiple buffer overflows in the read and write handlers in the Omnikey CardMan 4040 driver. This allows local users to gain privileges.

Recommendations For versions prior to 2.6.21-rc3, update to version 2.6.21-rc3 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0005

DSA-1286-1

RHSA-2007:0099

RHSA-2007_0099

Affected Products

Linux Kernel

Omnikey Cardman 4040

Red Hat

References · 35

• 🔥 https://exploit-db.com/exploits/3441 · Exploit
• http://fedoranews.org/cms/node/2787 · Vendor Advisory
• http://ubuntu.com/usn/usn-486-1 · Vendor Advisory
• http://secunia.com/advisories/24518 · Vendor Advisory
• http://fedoranews.org/cms/node/2788 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04885 · Security Note
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc3 · Vendor Advisory
• http://secunia.com/advisories/25691 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0099.html · Vendor Advisory
• http://secunia.com/advisories/24436 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04886 · Security Note
• http://secunia.com/advisories/24777 · Vendor Advisory
• http://secunia.com/advisories/25078 · Vendor Advisory
• http://secunia.com/advisories/26139 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04884 · Security Note