Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

pound: HTTP Request Smuggling Attack

Package(s):

pound

CVE #(s):

CVE-2005-3751

Created:

January 10, 2006

Updated:

June 8, 2006

Description:

HTTP requests with conflicting Content-Length and Transfer-Encoding headers could lead to HTTP Request Smuggling Attack, which can be exploited to bypass packet filters or poison web caches.

Alerts:

Gentoo	200606-05	2006-06-07
Debian	DSA-934-1	2006-01-09

(Log in to post comments)