CVE

Id
5282  
CVE No.
CVE-2002-0893  
Status
Candidate  
Description
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.  
Phase
Proposed (20020830)  
Votes
ACCEPT(1) Frech | MODIFY(1) Jones | NOOP(5) Alderson, Armstrong, Cole, Cox, Foat  
Comments
Jones> Suggest: "... via a URL-encoded request to | /servlet/com.newatlanta.servletexec.JSP10Servlet/ containing sequences like | "..%5c" (modified dot-dot)."  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
28291 5282 CVE-2002-0893 BUGTRAQ:20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1  View
28292 5282 CVE-2002-0893 URL:http://online.securityfocus.com/archive/1/273615  View
28293 5282 CVE-2002-0893 VULNWATCH:20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1  View
28294 5282 CVE-2002-0893 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html  View
28295 5282 CVE-2002-0893 XF:servletexec-dotdot-directory-traversal(9140)  View
28296 5282 CVE-2002-0893 URL:http://www.iss.net/security_center/static/9140.php  View
28297 5282 CVE-2002-0893 BID:4795  View

Related JVN