CVEvulnerability

CVE-2005-2916

5.0 MEDIUM Published 2005-09-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-09-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.

Affected configurations

• linksys wrt54g 3.01.3 • linksys wrt54g 3.03.6 • linksys wrt54g 4.00.7

References

http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities Patch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities Patch, Vendor Advisory