CVE-2009-10005

This Metasploit module exploits a combination of vulnerabilities in ContentKeeper Web Appliance to achieve remote command execution as the Apache user, with potential privilege escalation to root via an insecure PATH call in a setuid binary.

This Metasploit module exploits a file access vulnerability in ContentKeeper Web Appliance by abusing the 'mimencode' binary to retrieve arbitrary files outside the webroot via directory traversal. It sends a crafted POST request to encode the target file and then retrieves it via a GET request.