CVE-2001-1496 Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CriticalCVSS 9.8
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acme thttpd | >= 1.95, <= 2.20 | No fix listed |
References
- 20011120 Off-by-one vulnerability in thttpd!!! broken-link mailing-list third-party-advisory vdb-entry
- 20011123 Re: Off-by-one vulnerability in thttpd!!! broken-link mailing-list third-party-advisory vdb-entry
- 3562 broken-link third-party-advisory vdb-entry
- thttpd-basic-authentication-bo(7595) third-party-advisory vdb-entry