CVE-2001-1496: Acme Thttpd

Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

• Acme Thttpd: from 1.95, up to and including 2.20

Published 2001-12-31. Last modified 2026-06-16.