Launchpad.net

CVE 2012-5640

thttpd has a local DoS vulnerability via specially-crafted .htpasswd files

See the CVE page on Mitre.org for more details.