CVE-2001-1118: A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-22...

Security readout for executives and security teams

CVE-2001-1118 affects old Roxen web server versions. A URL decoding module could mishandle specially encoded URLs, allowing a remote attacker to read files or execute commands. The sources do not show current active exploitation, but an internet-facing affected server would carry serious business risk. Exposure is likely limited to legacy Roxen 2.0 and 2.1 deployments below the fixed version thresholds. Public-facing web servers are the main concern. The bundle lists affected vendor/product values as unavailable, so confirm exposure by product inventory, version evidence, and vendor notice review. Prioritize remediation if any affected Roxen server remains reachable from untrusted networks. The issue can expose files or permit command execution, but it applies to very old versions and current exploitation evidence is not provided. Mitigation focus: Upgrade Roxen 2.0 to 2.0.92 or later, where applicable.; Upgrade Roxen 2.1 to 2.1.264 or later, where applicable.; Review the Roxen security notice before choosing operational workarounds..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.