rapid7/metasploit-framework — pull request #453 by mdietz94 (2012-06-06 21:48:51+00:00)
Title: Boa HTTPd Basic Authentication Overflow

The Intersil extention in the Boa HTTP Server 0.93.x allows denial of service or possibly authentication bypass via a Basic Authentication header with a user string greater than 127 characters. You must set the request URI to the directory that requires basic authentication. Depending on the version of the server either the administrator password will be overwritten in memory or the web server will be shut down.