NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
http://www.iss.net/security_center/static/9141.php
http://online.securityfocus.com/archive/1/273615
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html