CVE ID:	CVE-2010-4572
Description:	CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a different vulnerability than CVE-2010-2761 and CVE-2010-4411.
Test IDs:	1.3.6.1.4.1.25623.1.0.68959   1.3.6.1.4.1.25623.1.0.70411
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4572 BugTraq ID: 45982 http://www.securityfocus.com/bid/45982 Debian Security Information: DSA-2322 (Google Search) http://www.debian.org/security/2011/dsa-2322 http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html http://osvdb.org/70703 http://secunia.com/advisories/43033 http://secunia.com/advisories/43165 http://www.vupen.com/english/advisories/2011/0207 http://www.vupen.com/english/advisories/2011/0271 XForce ISS Database: bugzilla-chartcgi-response-splitting(65440) https://exchange.xforce.ibmcloud.com/vulnerabilities/65440