"SD Card Reader" - are you talking about a Secure Digital/Multimedia Card socket, or some sort of custom device?
...it's a standard, well at least I think SDMMC specifications say they're ~3.3-3.6V maximum.
Use an open drain hex buffer like a
http://www.fairchildsemi.com/pf/74/74LCX07.html .
Buffer each signal.
Power the chip with 3.3V
Hook the SPI MOSI pull up resistor to 3.3V
Hook the SPI MISO pull up resistor to 5V
Hook the SPI CLK pull up resistor to 3.3V
Hook the SPI CS pull up resistor to 3.3V