What is CVE-2009-10005?

CVE-2009-10005 is a vulnerability in Contentkeeper Technologies Web Appliance, classified under Files or Directories Accessible to External Parties. Published 2025-08-20.

Is CVE-2009-10005 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Contentkeeper Technologies Web Appliance

CVE-2009-10005

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin/ck/mimencode with traversal and output parameters, attackers can read sensitive files such as /etc/passwd outside the webroot.

EPSS: 0.008 (52.2th percentile) — read the EPSS interpretation.

Affected products

Contentkeeper Technologies Web Appliance — versions 0

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

Public proof-of-concept exploits

rapid7/metasploit-framework

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2009-10005?: CVE-2009-10005 is a vulnerability in Contentkeeper Technologies Web Appliance, classified under Files or Directories Accessible to External Parties. Published 2025-08-20.
Is CVE-2009-10005 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.