CVE-2007-0005

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040...

6.9 MediumPublic exploit

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Exploit likelihood

0.64%Down 2.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Record: CVE-2007-0005
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Record: CVE-2007-0005
Updated: 2026-11-02

EUVDEUVD-2007-0009 No score

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Record: EUVD-2007-0009
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wqq7-6mh4-2rxq No score

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040...

Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel before 2.6.21-rc3 allow local users to gain privileges.

Record: GHSA-wqq7-6mh4-2rxq
Weakness: CWE-119
Updated: 2026-11-02

Affected products

omnikey.aaitg omnikey cardman 4040

Affected packages

Affected packages
Package	Affected	Fixed
`linux-2.6` Debian:4.0 From an advisory covering 4 CVEs	before 2.6.18.dfsg.1-12etch1, plus listed versions 2.6.18.dfsg.1-12	2.6.18.dfsg.1-12etch1
`kernel` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE-devel` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-debuginfo-common` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-devel` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-doc` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-headers` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5

Show 18 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-xen` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-xen-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-xen-devel` Red Hat:enterprise_linux:5::client From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-PAE-devel` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-debuginfo-common` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-devel` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-doc` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-headers` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-kdump` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-kdump-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-kdump-devel` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-xen` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-xen-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5
`kernel-xen-devel` Red Hat:enterprise_linux:5::server From an advisory covering 3 CVEs	before 0:2.6.18-8.1.1.el5	0:2.6.18-8.1.1.el5

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Linux Omnikey Cardman 4040 Driver - Local Buffer Overflow (PoC)	2007-03-09

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0005 is a medium vulnerability (CVSS 6.9) in Omnikey.aaitg Omnikey Cardman 4040, published March 10, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 50th percentile. No source names a fixed version.

References

Show 37 moreShow less