CVE ID:	CVE-2005-2703
Description:	Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.
Test IDs:	1.3.6.1.4.1.25623.1.0.55476   1.3.6.1.4.1.25623.1.0.55515   1.3.6.1.4.1.25623.1.0.55477
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2703 BugTraq ID: 14923 http://www.securityfocus.com/bid/14923 BugTraq ID: 15495 http://www.securityfocus.com/bid/15495 Debian Security Information: DSA-838 (Google Search) http://www.debian.org/security/2005/dsa-838 Debian Security Information: DSA-866 (Google Search) http://www.debian.org/security/2005/dsa-866 Debian Security Information: DSA-868 (Google Search) http://www.debian.org/security/2005/dsa-868 http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00004.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:169 http://www.mandriva.com/security/advisories?name=MDKSA-2005:170 http://www.mandriva.com/security/advisories?name=MDKSA-2005:174 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10767 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1089 RedHat Security Advisories: RHSA-2005:785 http://www.redhat.com/support/errata/RHSA-2005-785.html RedHat Security Advisories: RHSA-2005:789 http://www.redhat.com/support/errata/RHSA-2005-789.html RedHat Security Advisories: RHSA-2005:791 http://www.redhat.com/support/errata/RHSA-2005-791.html SCO Security Bulletin: SCOSA-2005.49 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://securitytracker.com/id?1014954 http://secunia.com/advisories/16911 http://secunia.com/advisories/16917 http://secunia.com/advisories/16977 http://secunia.com/advisories/17014 http://secunia.com/advisories/17026 http://secunia.com/advisories/17042 http://secunia.com/advisories/17090 http://secunia.com/advisories/17149 http://secunia.com/advisories/17263 http://secunia.com/advisories/17284 SuSE Security Announcement: SUSE-SA:2005:058 (Google Search) http://www.novell.com/linux/security/advisories/2005_58_mozilla.html http://www.ubuntu.com/usn/usn-200-1 http://www.vupen.com/english/advisories/2005/1824 XForce ISS Database: mozilla-xmlhttprequest-spoofing(22376) https://exchange.xforce.ibmcloud.com/vulnerabilities/22376