{"vulnerability": "CVE-2005-2799", "sightings": [{"uuid": "f8c32398-4ea5-4a5b-ba6a-7ad2e91b4540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "998f6ea4-c2bc-4a53-b2e7-806350e5c017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:13.000000Z"}, {"uuid": "9711d470-3a45-44ea-b592-3b4d0164e1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_apply_cgi.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "9fcb4ba8-fbea-4973-8449-e367aeac8877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_wrt54gl_apply_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "23c5dbcf-924c-4907-b9d8-f2f951c8099e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2005-2799", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16854", "content": "", "creation_timestamp": "2010-09-24T00:00:00.000000Z"}, {"uuid": "ef365b6b-df7b-4e49-b4a9-18f1eb62b3b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_apply_cgi.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"Raphael Rigo \", \"Julien Tinnes \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers.\\n          According to iDefense who discovered this vulnerability, all WRT54G versions prior to\\n          4.20.7 and all WRT54GS version prior to 1.05.2 may be affected.\", \"disclosure_date\": \"2005-09-13\", \"fullname\": \"exploit/linux/http/linksys_apply_cgi\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Linksys WRT54 Access Point apply.cgi Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/linksys_apply_cgi.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/http/linksys_apply_cgi\", \"references\": [\"CVE-2005-2799\", \"OSVDB-19389\", \"URL-http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=305\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Generic\", \"Version 1.42.2\", \"Version 2.02.6beta1\", \"Version 2.02.7_ETSI\", \"Version 3.03.6\", \"Version 4.00.7\", \"Version 4.20.06\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.083500Z"}, {"uuid": "a32128d7-8715-47bc-96a3-447e1c105e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2799", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksys_wrt54gl_apply_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, mipsle\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Some Linksys Routers are vulnerable to an authenticated OS command injection in\\n          the Web Interface. Default credentials are admin/admin or admin/password. Since it\\n          is a blind os command injection vulnerability, there is no output for the executed\\n          command when using the cmd generic payload. A ping command against a controlled\\n          system could be used for testing purposes. The user must be prudent when using this\\n          module since it modifies the router configuration while exploitation, even when it\\n          tries to restore previous values.\", \"disclosure_date\": \"2013-01-18\", \"fullname\": \"exploit/linux/http/linksys_wrt54gl_apply_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Linksys WRT54GL apply.cgi Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/linksys_wrt54gl_apply_exec.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 0, \"ref_name\": \"linux/http/linksys_wrt54gl_apply_exec\", \"references\": [\"CVE-2005-2799\", \"OSVDB-89912\", \"BID-57459\", \"EDB-24202\", \"URL-http://www.s3cur1ty.de/m1adv2013-001\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"CMD\", \"Linux mipsel Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.506744Z"}]}