CVE-2004-2029: The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote at...

Security readout for executives and security teams

CVE-2004-2029 is a remote denial-of-service issue in older BNBT BitTorrent Tracker releases. A malformed Basic Authentication request can crash the tracker process, interrupting torrent tracking service availability. The sources do not provide CVSS scoring, confirmed active exploitation, or a named fixed release. Exposure is likely limited to organizations still running legacy BNBT tracker software, especially if the tracker is reachable from the internet. Modern environments are unlikely to be affected unless they maintain old BitTorrent tracker infrastructure. Prioritize remediation if BNBT is still exposed or supports business-critical file distribution. For most organizations, this should be an inventory cleanup item rather than an emergency, because the affected software is old and the documented impact is service crash only. Mitigation focus: Identify any BNBT BitTorrent Tracker deployments and confirm versions.; Remove or replace BNBT Beta 7.5 Release 2 and earlier where found.; Restrict tracker access to trusted networks if immediate retirement is not possible..

Prepared

Jun 29, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.