NVD

Id
5902  
Name
CVE-2008-6171  
Description
includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remote attackers to include and execute arbitrary files via the HTTP Host header.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-02-19  
Modified Date
2009-05-14  
Seq
2008-6171  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
35779 5902 CVE-2008-6171 http://drupal.org/files/sa-2008-067/SA-2008-067-5.11.patch  View
35780 5902 CVE-2008-6171 http://drupal.org/node/324824  View
35781 5902 CVE-2008-6171 31900  View
35782 5902 CVE-2008-6171 ADV-2008-2913  View
35783 5902 CVE-2008-6171 drupal-unspecified-file-include(46049)  View
35784 5902 CVE-2008-6171 FEDORA-2008-9170  View
35785 5902 CVE-2008-6171 FEDORA-2008-9213  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46969 JVNDB-2008-002279 Drupal における任意のファイルを実行される脆弱性 Drupal には、サーバに "IP-based virtual hosts" が設定されている場合に任意のファイルを実行される脆弱性が存在します。 CVE-2008-6171 36284 CVE-2008-6171 5902 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002279.html 2008-10-22 2009-02-24 View