Ubuntu Security Notice USN-120-1 – Luca Ercoli discovered that the htdigest program did not perform any bounds checking when it copied the user and realm arguments into local buffers. If this program is used in remotely callable CGI scripts, this could be exploited by a remote attacker to execute arbitrary code with the privileges of the CGI script.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39093/USN-120-1.txt
Source: https://packetstormsecurity.com/files/39093/Ubuntu-Security-Notice-120-1.html