PT-2001-2261 · Roxen · Roxen

Published 2001-08-02 · Updated 2017-10-10 · CVE-2001-1118

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Roxen versions 2.0 through 2.0.91 Roxen versions 2.1 through 2.1.263

Description A module in Roxen does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.

Recommendations For Roxen versions 2.0 through 2.0.91, update to version 2.0.92 or later. For Roxen versions 2.1 through 2.1.263, update to version 2.1.264 or later.

Fix

Related Identifiers

CVE-2001-1118

Affected Products

Roxen

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2001-1118 · Security Note
• http://securityfocus.com/bid/3145 · Vendor Advisory
• http://securityfocus.com/archive/1/201476 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6937 · Note
• http://securityfocus.com/archive/1/201499 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1118 · Note
• http://download.roxen.com/2.0/patch/security-notice.html · Note