Drupal View User Profile Authorization Bypass Vulnerability

Bugtraq ID:	15674
Class:	Access Validation Error
CVE:	CVE-2005-3974
Remote:	Yes
Local:	No
Published:	Dec 01 2005 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Andrew Widdowson is credited with the discovery of this vulnerability.
Vulnerable:	Drupal Drupal 4.6.3 Drupal Drupal 4.6.2 Drupal Drupal 4.6.1 Drupal Drupal 4.6 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1

Not Vulnerable:	Drupal Drupal 4.6.4