system
Describe <CVE-2008-6171>.
user
What is <CVE-2008-6171>?
assistant
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header..