CVE:CVE-2005-3974
CNNVD:CNNVD-200512-036
Drupal 4.5.0到4.5.5和4.6.0到4.6.3在PHP5上运行时，不能正确实施用户权限，远程攻击者可以绕过"access user profiles"许可。
solution:Upgrade drupal drupal to a higher version than 4.5,4.5.1,4.5.2,4.5.3,4.5.4,4.5.5,4.6,4.6.1,4.6.2,4.6.3,and avoid the version 4.5,4.5.1,4.5.2,4.5.3,4.5.4,4.5.5,4.6,4.6.1,4.6.2,4.6.3