Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0892. PoCs published by Matt Moore.
AI-analyzed exploit summary The provided text describes an information disclosure vulnerability in ServletExec/ISAPI where a specially crafted request without a trailing filename reveals the absolute path to the webroot directory. This is not a functional exploit but rather a description of the vulnerability and its impact.
Description
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
Exploits (1)
The provided text describes an information disclosure vulnerability in ServletExec/ISAPI where a specially crafted request without a trailing filename reveals the absolute path to the webroot directory. This is not a functional exploit but rather a description of the vulnerability and its impact.