CVE-2005-3751

Description

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.

References

http://www.novell.com/linux/security/advisories/2006_05_19.html

http://www.gentoo.org/security/en/glsa/glsa-200606-05.xml

http://www.debian.org/security/2005/dsa-934

http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000

http://secunia.com/advisories/20510

http://secunia.com/advisories/20215

http://secunia.com/advisories/18381

http://secunia.com/advisories/18367

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3