This script is Copyright (C) 2012-2013 Tenable Network Security, Inc.
The remote Mandrake Linux host is missing one or more security
A problem exists in the Zope package with the getRoles method of user
objects contained in the default UserFolder implementation. Users with
the ability to edit DTML could arrange to give themselves extra roles
for the duration of a single request by mutating the roles list as a
part of the request process.
Update the affected packages.
Risk factor :
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now