{"uuid": "773546e9-0b5d-40bf-aca6-9c6400357670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10021", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dir605l_captcha_bof.rb", "content": "{\"aliases\": [], \"arch\": \"mipsbe\", \"author\": [\"Craig Heffner\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an anonymous remote code execution vulnerability on D-Link DIR-605L routers. The\\n          vulnerability exists while handling user supplied captcha information, and is due to the\\n          insecure usage of sprintf on the getAuthCode() function. This module has been tested\\n          successfully on D-Link DIR-605L firmware 1.13 (emulated) and firmware 1.12 (real).\", \"disclosure_date\": \"2012-10-08\", \"fullname\": \"exploit/linux/http/dlink_dir605l_captcha_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"D-Link DIR-605L Captcha Handling Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_dir605l_captcha_bof.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/dlink_dir605l_captcha_bof\", \"references\": [\"CVE-2012-10021\", \"OSVDB-86824\", \"URL-http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"D-Link DIR-605L 1.13\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:30.249317Z"}