CVE-2000-0359: Acme Labs Thttpd

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Buffer overflow in Trivial HTTP (THTTPd) allows remote attackers to cause a denial of service or execute arbitrary commands via a long If-Modified-Since header.

Affected products

  • Acme Labs Thttpd: version 1.90a only; version 1.95 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; …

Published 2000-10-20. Last modified 2026-06-16.