{"uuid": "ef365b6b-df7b-4e49-b4a9-18f1eb62b3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_apply_cgi.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"Raphael Rigo \", \"Julien Tinnes \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers.\\n          According to iDefense who discovered this vulnerability, all WRT54G versions prior to\\n          4.20.7 and all WRT54GS version prior to 1.05.2 may be affected.\", \"disclosure_date\": \"2005-09-13\", \"fullname\": \"exploit/linux/http/linksys_apply_cgi\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Linksys WRT54 Access Point apply.cgi Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/linksys_apply_cgi.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/http/linksys_apply_cgi\", \"references\": [\"CVE-2005-2799\", \"OSVDB-19389\", \"URL-http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=305\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic\", \"Version 1.42.2\", \"Version 2.02.6beta1\", \"Version 2.02.7_ETSI\", \"Version 3.03.6\", \"Version 4.00.7\", \"Version 4.20.06\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.083500Z"}