Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor New Atlanta Communications Subscribe
Filtered by product Servletexec Isapi
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0892 1 New Atlanta Communications 1 Servletexec Isapi 2008-09-05 5.0 MEDIUM N/A
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
CVE-2002-0893 1 New Atlanta Communications 1 Servletexec Isapi 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
CVE-2002-0894 1 New Atlanta Communications 1 Servletexec Isapi 2008-09-05 5.0 MEDIUM N/A
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.