Common subdirectories: hunchentoot-0.15.6/doc and hunchentoot-0.15.6.patched/doc
diff -u hunchentoot-0.15.6/hunchentoot.asd hunchentoot-0.15.6.patched/hunchentoot.asd
--- hunchentoot-0.15.6/hunchentoot.asd	2008-04-09 10:17:48.000000000 +0200
+++ hunchentoot-0.15.6.patched/hunchentoot.asd	2008-05-19 21:33:54.000000000 +0200
@@ -50,6 +50,7 @@
                #-(or :lispworks :hunchentoot-no-ssl) :cl+ssl
                :md5
                :rfc2388
+               :cl-rfc2047
                #+:sbcl :sb-bsd-sockets
                #+:sbcl :sb-posix
                :url-rewrite)
diff -u hunchentoot-0.15.6/request.lisp hunchentoot-0.15.6.patched/request.lisp
--- hunchentoot-0.15.6/request.lisp	2008-02-13 17:02:18.000000000 +0100
+++ hunchentoot-0.15.6.patched/request.lisp	2008-05-19 21:33:54.000000000 +0200
@@ -284,8 +284,9 @@
                      (scan "\\S" authorization :start 5))))
     (when start
       (destructuring-bind (&optional user password)
-          (split ":" (base64:base64-string-to-string (subseq authorization start)))
-        (values user password)))))
+          (split ":" (base64:base64-string-to-string
+                      (subseq authorization start)))
+        (values (cl-rfc2047:decode* user) (cl-rfc2047:decode* password))))))
 
 (defun remote-addr (&optional (request *request*))
   "Returns the address the current request originated from."
Common subdirectories: hunchentoot-0.15.6/test and hunchentoot-0.15.6.patched/test