CVE ID:	CAN-2005-2703
Description:	Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
Test IDs:	1.3.6.1.4.1.25623.1.0.55711   1.3.6.1.4.1.25623.1.0.55515
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2703 1014954 http://securitytracker.com/id?1014954 14923 http://www.securityfocus.com/bid/14923 15495 http://www.securityfocus.com/bid/15495 16911 http://secunia.com/advisories/16911 16917 http://secunia.com/advisories/16917 16977 http://secunia.com/advisories/16977 17014 http://secunia.com/advisories/17014 17026 http://secunia.com/advisories/17026 17042 http://secunia.com/advisories/17042 17090 http://secunia.com/advisories/17090 17149 http://secunia.com/advisories/17149 17263 http://secunia.com/advisories/17263 17284 http://secunia.com/advisories/17284 ADV-2005-1824 http://www.vupen.com/english/advisories/2005/1824 DSA-838 http://www.debian.org/security/2005/dsa-838 DSA-866 http://www.debian.org/security/2005/dsa-866 DSA-868 http://www.debian.org/security/2005/dsa-868 FLSA-2006:168375 http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html MDKSA-2005:169 http://www.mandriva.com/security/advisories?name=MDKSA-2005:169 MDKSA-2005:170 http://www.mandriva.com/security/advisories?name=MDKSA-2005:170 MDKSA-2005:174 http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 RHSA-2005:785 http://www.redhat.com/support/errata/RHSA-2005-785.html RHSA-2005:789 http://www.redhat.com/support/errata/RHSA-2005-789.html RHSA-2005:791 http://www.redhat.com/support/errata/RHSA-2005-791.html SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt SUSE-SA:2005:058 http://www.novell.com/linux/security/advisories/2005_58_mozilla.html USN-200-1 http://www.ubuntu.com/usn/usn-200-1 http://www.mozilla.org/security/announce/mfsa2005-58.html http://www.mozilla.org/security/announce/mfsa2005-58.html mozilla-xmlhttprequest-spoofing(22376) https://exchange.xforce.ibmcloud.com/vulnerabilities/22376 oval:org.mitre.oval:def:10767 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767 oval:org.mitre.oval:def:1089 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089