Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-3751HistoryNov 22, 2005 - 8:03 p.m.
CVE-2005-3751
2005-11-2220:03:00
Debian Security Bug Tracker
security-tracker.debian.org
3
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | pound | < 1.9.4-1 | pound_1.9.4-1_all.deb |
Related
nessus
nessus
GLSA-200606-05 : Pound: HTTP request smuggling
2006-06-08 00:00:00
Debian DSA-934-1 : pound - several vulnerabilities
2006-10-14 00:00:00
Ubuntu 16.04 LTS : Pound vulnerabilities (USN-4702-1)
2021-01-25 00:00:00
gentoo
gentoo
Pound: HTTP request smuggling
2006-06-07 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200606-05 (pound)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200606-05 (pound)
2008-09-24 00:00:00
Debian: Security Advisory (DSA-934-1)
2008-01-17 00:00:00
cve
cve
CVE-2005-3751
2005-11-22 20:03:00
CVE-2016-10711
2018-01-29 20:29:00
prion
prion
Cross site request forgery (csrf)
2018-01-29 20:29:00
osv
osv
pound - remote
2006-01-09 00:00:00
debian
debian
[SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities
2006-01-10 03:25:14
[SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities
2006-01-10 03:25:14
securityvulns
securityvulns
[SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities
2006-01-10 00:00:00
ubuntucve
ubuntucve
CVE-2016-10711
2018-01-29 00:00:00
debiancve
debiancve
CVE-2016-10711
2018-01-29 20:29:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
Related for DEBIANCVE:CVE-2005-3751