Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-20011.
PoCs published by aushack, including Metasploit module exploits/unix/http/contentkeeperweb_mimencode.
AI-analyzed exploit summary This Metasploit module exploits a combination of vulnerabilities in ContentKeeper Web Appliance (versions prior to 125.10) to achieve remote command execution as the Apache user, with an optional privilege escalation to root via a setuid bash shell.
Description
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Additionally, the exploit can optionally escalate privileges by abusing insecure PATH usage in the benetool binary, resulting in root-level access if successful.
Exploits (1)
This Metasploit module exploits a combination of vulnerabilities in ContentKeeper Web Appliance (versions prior to 125.10) to achieve remote command execution as the Apache user, with an optional privilege escalation to root via a setuid bash shell.
References (5)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H