CVE ID:	CVE-2016-9964
Description:	redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
Test IDs:	1.3.6.1.4.1.25623.1.0.874036   1.3.6.1.4.1.25623.1.0.703743   1.3.6.1.4.1.25623.1.1.10.2017.0031   1.3.6.1.4.1.25623.1.0.874042
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9964 BugTraq ID: 94961 http://www.securityfocus.com/bid/94961 Debian Security Information: DSA-3743 (Google Search) http://www.debian.org/security/2016/dsa-3743