CVE ID:	CVE-2005-3751
Description:	HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
Test IDs:	1.3.6.1.4.1.25623.1.0.56928
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3751 Debian Security Information: DSA-934 (Google Search) http://www.debian.org/security/2005/dsa-934 http://www.gentoo.org/security/en/glsa/glsa-200606-05.xml http://www.apsis.ch/pound/pound_list/archive/2005/2005-10/1129827166000/index_html?fullMode=1#1129827166000 http://secunia.com/advisories/18367 http://secunia.com/advisories/18381 http://secunia.com/advisories/20215 http://secunia.com/advisories/20510 SuSE Security Announcement: SUSE-SR:2006:011 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_19.html