A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2002-06-25T04:00:00
Updated: 2024-08-08T04:44:07.438Z
Reserved: 2002-03-15T00:00:00
Link: CVE-2001-1118
Vulnrichment
No data.
NVD
Status : Modified
Published: 2001-08-02T04:00:00.000
Modified: 2017-10-10T01:30:00.827
Link: CVE-2001-1118
Redhat
No data.