CVE-2007-0005
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
17.5%
Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:rc2:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21 | cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21 | cpe:2.3:o:linux:linux_kernel:2.6.21:rc1:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.1 | cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.2 | cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.3 | cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.4 | cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.5 | cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.6 | cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:* |
| linux | linux_kernel | 2.6.21.7 | cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:* |
References
fedoranews.org/cms/node/2787
fedoranews.org/cms/node/2788
kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.21-rc3
secunia.com/advisories/24436
secunia.com/advisories/24518
secunia.com/advisories/24777
secunia.com/advisories/24901
secunia.com/advisories/25078
secunia.com/advisories/25691
secunia.com/advisories/26133
secunia.com/advisories/26139
www.debian.org/security/2007/dsa-1286
www.mandriva.com/security/advisories?name=MDKSA-2007:078
www.osvdb.org/33023
www.redhat.com/support/errata/RHSA-2007-0099.html
www.securityfocus.com/archive/1/462300/100/0/threaded
www.securityfocus.com/archive/1/471457
www.securityfocus.com/bid/22870
www.ubuntu.com/usn/usn-486-1
www.ubuntu.com/usn/usn-489-1
www.vupen.com/english/advisories/2007/0872
exchange.xforce.ibmcloud.com/vulnerabilities/32880
issues.rpath.com/browse/RPL-1035
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11238
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
17.5%