CVE-2009-10005

🗓️ 20 Aug 2025 15:31:57Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 20 Views🌐 WEB

CVE-2009-10005: CK before 125.10 mimencode exposed via CGI; traversal allows reading /etc/passwd.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2009-10005	20 Aug 202515:31	–	attackerkb
Circl	CVE-2009-10005	29 May 201815:50	–	circl
CNNVD	ContentKeeper Web Appliance 安全漏洞	20 Aug 202500:00	–	cnnvd
Cvelist	CVE-2009-10005 ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode	20 Aug 202515:31	–	cvelist
EUVD	EUVD-2009-5116	7 Oct 202500:30	–	euvd
NVD	CVE-2009-10005	20 Aug 202516:15	–	nvd
Positive Technologies	PT-2025-34094 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2009-10005	22 Aug 202515:35	–	redhatcve
Vulnrichment	CVE-2009-10005 ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode	20 Aug 202515:31	–	vulnrichment

Vulners

CNA

Node

contentkeeper_technologies web_applianceRange0–125.10

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "mimencode CGI binary"
    ],
    "product": "Web Appliance",
    "vendor": "ContentKeeper Technologies",
    "versions": [
      {
        "lessThan": "125.10",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/contentkeeper_fileaccess.rb
vulncheck	www.vulncheck.com/advisories/contentkeeper-web-appliance-arbitrary-file-access-via-mimencode
aushack	www.aushack.com/200904-contentkeeper.txt
exploit-db	www.exploit-db.com/exploits/16923
web	www.web.archive.org/web/20100325220542/http://www.contentkeeper.com/

Parameter	Position	Path	Description	CWE
traversal	request body	/cgi-bin/ck/mimencode	Unauthenticated attackers can read arbitrary files via a CGI endpoint by POSTing crafted data to /cgi-bin/ck/mimencode with traversal/output parameters.	CWE-552
output	request body	/cgi-bin/ck/mimencode	Unauthenticated attackers can read arbitrary files via a CGI endpoint by POSTing crafted data to /cgi-bin/ck/mimencode with traversal/output parameters.	CWE-552

15 Jul 2026 01:23Current

6.6Medium risk

Vulners AI Score6.6

CVSS 48.7

EPSS0.00781

SSVC

CWE-552