The Drupal Security Team has found that the privilege system of Drupal can be circumvented in a very special case because an input check is not implemented properly.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38102/DRUPAL-SA-2005-001.txt
Source: https://packetstormsecurity.com/files/38102/DRUPAL-SA-2005-001.txt.html