CVE-2002-0894 NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP1...
MediumCVSS 5.0
EPSS 3.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| new atlanta communications servletexec isapi | = 4.1 | No fix listed |
References
- 20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 mailing-list
- 20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 mailing-list
- servletexec-long-jsp-dos(9141) patch vdb-entry vendor-advisory
- 4796 exploit patch vdb-entry vendor-advisory