CVE-2005-2916

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.

• http://www.idefense.com/application/poi/display?id=306&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=307&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=306&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.idefense.com/application/poi/display?id=307&type=vulnerabilitiesPatch, Vendor Advisory

Published

Sep 14, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2903Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033…
• CVE-2005-2904Zebedee 2.4.1, when "allowed redirection port" is not set, a…
• CVE-2005-2912Linksys WRT54G router allows remote attackers to cause a den…
• CVE-2005-2913Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-2914ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-d…
• CVE-2005-2915ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-d…
• CVE-2005-2917Squid 2.5.STABLE10 and earlier, while performing NTLM authen…
• CVE-2005-2918The open_cmd_tube function in mount.c for gtkdiskfree 1.9.3 …
• CVE-2005-2919libclamav/fsg.c in Clam AntiVirus (ClamAV) before 0.87 allow…
• CVE-2005-2920Buffer overflow in libclamav/upx.c in Clam AntiVirus (ClamAV…
• CVE-2005-2922Heap-based buffer overflow in the embedded player in multipl…
• CVE-2005-2923The IMAP server in IMail Server 8.20 in Ipswitch Collaborati…