CVE-2001-1496

Critical

Published: 31/12/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

There is an off-by-one buffer overflow in the Basic Authentication mechanism in thttpd from Acme Labs versions 1.95 through 2.20. This can lead to denial of service and potentially allow remote attackers to execute arbitrary code.

Risk Assessment

The organization may be vulnerable to attacks that could result in service disruption and unauthorized access to systems.

Recommendation

It is recommended to update thttpd to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.