Bug 170862 (CVE-2007-0005)

Summary:	Kernel: Buffer overflow in omnikey driver (CVE-2007-0005)
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0005
Whiteboard:	[linux < 2.6.16.44][linux >= 2.6.17 < 2.6.20.2][gp <2.6.20-3]
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2007-03-14 12:41:03 UTC

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Comment 1 unnamedrambler 2008-03-07 19:14:59 UTC

[linux < 2.6.16.44] dfe67217aea3eb4ecbab736903f6ecee3458b8a8
[linux => 2.6.17 < 2.6.20.2] 7670279989a552a7a8afd275368d55a4f3b5054b
this patch also made it into 2.6.21 059819a41d4331316dd8ddcf977a24ab338f4300

[gp <2.6.20-3]