Secunia

A vulnerability has been reported in the Pubcookie module for Drupal, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to insufficient checks within the pubcookie.module file, which can be exploited to bypass the login mechanism.

The vulnerability has been reported in versions 4.6 and 4.7 where the CVS $Id# field in the pubcookie.module file is older than "// $Id: pubcookie.module,v 1.2.2.4 2006/09/07 01:44:11 jvandyk Exp $" or "// $Id: pubcookie.module,v 1.2.2.4 2006/09/07 01:44:11 jvandyk Exp $".

Solution
Update to the latest version.
Further details available in Customer Area

Provided and/or discovered by
Eric Drechsel

Changelog
Further details available in Customer Area

Original Advisory
http://drupal.org/node/83064

Deep Links
Links available in Customer Area