Approved changes feed: RSS · Atom

cpe:2.3:a:new_atlanta_communications:servletexec_isapi:4.1:*:*:*:*:*:*:*

part: a version: 4.1 update: *

VendorNew Atlanta Communications (9156dde4-83e3-5535-a064-24636a7287f5)
ProductServletexec Isapi (0fcb9bb4-260e-5747-b813-cb08fa1f389b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0894 vulnerable 2026-06-08 04:46:22.478048 Details available
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:03:49.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0893 vulnerable 2026-06-08 04:46:22.477750 Details available
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:03:49.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0892 vulnerable 2026-06-08 04:46:22.477397 Details available
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:03:49.264Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.