Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•3 views

CVE-2002-0892: Undefined Security Weakness

The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message...

5CVSS5.9AI score0.07556EPSS
SaveExploits1References1
NVD
NVD
•added 2002/10/04 4:00 a.m.•16 views

CVE-2002-0892

The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message...

5CVSS6.6AI score0.07556EPSS
SaveExploits1References5
CVE
CVE
•added 2002/08/31 4:00 a.m.•79 views

CVE-2002-0893

The CVE-2002-0893 entry maps to ServletExec 4.1 ISAPI vulnerability in the JSP10Servlet that enables directory traversal. Multiple connected sources describe that by issuing a URL-encoded "..%5c" (modified dot-dot) to com.newatlanta.servletexec.JSP10Servlet, an attacker can read arbitrary files w...

5CVSS6.7AI score0.08297EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/31 12:00 a.m.•2 views

CVE-2002-0894: Undefined Security Weakness

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service crash via 1 a request for a long .jsp file, or 2 a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet...

5CVSS5.8AI score0.03318EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/31 12:00 a.m.•2 views

CVE-2002-0893: Undefined Security Weakness

Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" modified dot-dot sequences...

5CVSS6AI score0.08297EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2002/05/23 12:00 a.m.•46 views

Multiple bugs in ServletExec ISAPI

Physical path disclosure, directory traversal, DoS, buffer overflow...

3.6AI score
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2002/05/22 12:00 a.m.•29 views

NewAtlanta ServletExecISAPI 4.1 - File Disclosure

NewAtlanta ServletExecISAPI 4.1 - File Disclosure source: https://www.securityfocus.com/bid/4795/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. ServletExec/ISAPI will disclose the contents of arbitrary files...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2002/05/22 12:00 a.m.•22 views

NewAtlanta ServletExecISAPI 4.1 JSPServlet - Denial of Service

NewAtlanta ServletExecISAPI 4.1 JSPServlet - Denial of Service // source: https://www.securityfocus.com/bid/4796/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. A denial of service condition occurs when the...

7.3AI score
SaveExploits0
Rows per page
Query Builder