CVE-2001-1118 | BDVDB-2026-4304 Detail

Description#

A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/3145
https://exchange.xforce.ibmcloud.com/vulnerabilities/6937
http://download.roxen.com/2.0/patch/security-notice.html
http://www.securityfocus.com/archive/1/201499
http://www.securityfocus.com/archive/1/201476

Exploit#

No public exploit known

History#

Version 12002-06-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.