CVE-2009-20011
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user, and optionally escalate privileges to root.
Risk Assessment
An attacker can remotely execute arbitrary code and, if privilege escalation succeeds, gain root access, leading to full device compromise. This could enable further attacks within the organization's network.
Recommendation
Update ContentKeeper Web Appliance to version 125.10 or later. Until then, restrict access to the management interface and monitor for unusual activity.
Other vulnerabilities in ContentKeeper Web Appliance
Original NVD description (English source)
ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote command execution due to insecure handling of file uploads via the mimencode CGI utility. The vulnerability allows unauthenticated attackers to upload and execute arbitrary scripts as the Apache user. Additionally, the exploit can optionally escalate privileges by abusing insecure PATH usage in the benetool binary, resulting in root-level access if successful.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS