CVE-2005-2434

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Aug 3, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-24354.3Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTCVE-2005-24365.0browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir paraCVE-2005-24375.0Website Baker Project does not properly verify the file extensions of uploaded files, which allows remote attackers to upload and execute arCVE-2005-24384.3Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode coCVE-2005-24397.5SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL CVE-2005-24407.5SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via CVE-2005-24414.3Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UseCVE-2005-24425.0Cross-Application Scripting (XAS) vulnerability in SPI Dynamics WebInspect 5.0.196 allows remote attackers to inject Javascript from one appCVE-2005-24435.0Kshout 2.x and 3.x stores settings.dat under the web document root with insufficient access control, which allows remote attackers to obtainCVE-2005-24442.1Trillian Pro 3.1 build 121, when checking Yahoo e-mail, stores the password in plaintext in a world readable file and does not delete the fiCVE-2005-24457.5SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory CVE-2005-24485.0Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service (invalid behavior in applic
CVE-2005-2434: Medium severity, CVSS 5.0 | Vulnix