CVE-2001-1118

HIGH 7.5CVE-2001-1118 · Published 02/08/2001 · updated 16/06/2026

In short

CVE-2001-1118 is a HIGH (CVSS 7.5) vulnerability affecting roxen webserver (roxen).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
roxen webserver roxen	`= 2.0= 2.1`	No fix yet

Description

A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.

References

download.roxen.com/2.0/patch/security-notice.html
securityfocus.com/archive/1/201476 · Patch
securityfocus.com/archive/1/201499
securityfocus.com/bid/3145 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/6937

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free