QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-3751

Back to search

CVE-2005-3751

Published: Nov 22, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-934
vendor-advisory
x_refsource_DEBIAN
18367
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2006:011
vendor-advisory
x_refsource_SUSE
GLSA-200606-05
vendor-advisory
x_refsource_GENTOO
20215
third-party-advisory
x_refsource_SECUNIA
18381
third-party-advisory
x_refsource_SECUNIA
20510
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now