Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2001-1496

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.191
EPSS Ranking 95.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2001-1496
  • Acme » Thttpd » Version: 1.95
    cpe:2.3:a:acme:thttpd:1.95
  • Acme » Thttpd » Version: 2.00
    cpe:2.3:a:acme:thttpd:2.00
  • Acme » Thttpd » Version: 2.01
    cpe:2.3:a:acme:thttpd:2.01
  • Acme » Thttpd » Version: 2.02
    cpe:2.3:a:acme:thttpd:2.02
  • Acme » Thttpd » Version: 2.03
    cpe:2.3:a:acme:thttpd:2.03
  • Acme » Thttpd » Version: 2.04
    cpe:2.3:a:acme:thttpd:2.04
  • Acme » Thttpd » Version: 2.05
    cpe:2.3:a:acme:thttpd:2.05
  • Acme » Thttpd » Version: 2.06
    cpe:2.3:a:acme:thttpd:2.06
  • Acme » Thttpd » Version: 2.07
    cpe:2.3:a:acme:thttpd:2.07
  • Acme » Thttpd » Version: 2.08
    cpe:2.3:a:acme:thttpd:2.08
  • Acme » Thttpd » Version: 2.09
    cpe:2.3:a:acme:thttpd:2.09
  • Acme » Thttpd » Version: 2.10
    cpe:2.3:a:acme:thttpd:2.10
  • Acme » Thttpd » Version: 2.11
    cpe:2.3:a:acme:thttpd:2.11
  • Acme » Thttpd » Version: 2.12
    cpe:2.3:a:acme:thttpd:2.12
  • Acme » Thttpd » Version: 2.13
    cpe:2.3:a:acme:thttpd:2.13
  • Acme » Thttpd » Version: 2.14
    cpe:2.3:a:acme:thttpd:2.14
  • Acme » Thttpd » Version: 2.15
    cpe:2.3:a:acme:thttpd:2.15
  • Acme » Thttpd » Version: 2.16
    cpe:2.3:a:acme:thttpd:2.16
  • Acme » Thttpd » Version: 2.17
    cpe:2.3:a:acme:thttpd:2.17
  • Acme » Thttpd » Version: 2.18
    cpe:2.3:a:acme:thttpd:2.18
  • Acme » Thttpd » Version: 2.19
    cpe:2.3:a:acme:thttpd:2.19
  • Acme » Thttpd » Version: 2.20
    cpe:2.3:a:acme:thttpd:2.20


Contact Us

Shodan ® - All rights reserved