Exploitation Summary
EIP tracks 4 public exploits for CVE-2005-2799.
PoCs published by Metasploit, Raphael Rigo, including Metasploit module exploits/linux/http/linksys_wrt54gl_apply_exec.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in the Linksys WRT54G/GS routers' apply.cgi, allowing remote code execution via a crafted POST request. It targets multiple firmware versions and uses a MIPSLE payload.
Description
Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in the Linksys WRT54G/GS routers' apply.cgi, allowing remote code execution via a crafted POST request. It targets multiple firmware versions and uses a MIPSLE payload.
This Metasploit module exploits a stack overflow in the Linksys WRT54G and WRT54GS routers' apply.cgi. It targets a buffer overflow vulnerability (CVE-2005-2799) by sending a maliciously crafted POST request with a large payload to overwrite the return address and execute shellcode.
This Metasploit module exploits an authenticated OS command injection vulnerability in the Linksys WRT54GL router's web interface via the apply.cgi endpoint. It supports both command execution and MIPS payload delivery, with options to restore the original configuration post-exploitation.
This Metasploit module exploits a stack buffer overflow in the Linksys WRT54G and WRT54GS routers' apply.cgi endpoint. It sends a malicious POST request with a crafted payload to overwrite the return address and execute arbitrary code.