PT-2001-2261 · Roxen · Roxen

Publicado 2001-08-02 · Atualizado 2017-10-10 · CVE-2001-1118

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Roxen versions 2.0 through 2.0.91 Roxen versions 2.1 through 2.1.263

Description A module in Roxen does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.

Recommendations For Roxen versions 2.0 through 2.0.91, update to version 2.0.92 or later. For Roxen versions 2.1 through 2.1.263, update to version 2.1.264 or later.

Correção

Identificadores relacionados

CVE-2001-1118

Produtos afetados

Roxen

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2001-1118 · Nota de Segurança
• http://securityfocus.com/bid/3145 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6937 · Nota
• http://securityfocus.com/archive/1/201499 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1118 · Nota
• http://securityfocus.com/archive/1/201476 · Aviso do Fabricante
• http://download.roxen.com/2.0/patch/security-notice.html · Nota