CVE ID:	CVE-2008-3906
Description:	CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the query string.
Test IDs:	1.3.6.1.4.1.25623.1.0.62911   1.3.6.1.4.1.25623.1.0.61704
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3906 BugTraq ID: 30867 http://www.securityfocus.com/bid/30867 Bugtraq: 20080930 rPSA-2008-0286-1 mono (Google Search) http://www.securityfocus.com/archive/1/496845/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2008:210 http://www.openwall.com/lists/oss-security/2008/08/27/6 http://secunia.com/advisories/31643 http://secunia.com/advisories/36494 https://usn.ubuntu.com/826-1/ http://www.vupen.com/english/advisories/2008/2443 XForce ISS Database: mono-sysweb-xss(44740) https://exchange.xforce.ibmcloud.com/vulnerabilities/44740