Upgrade to version 4.6.0 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
Vendor Specific News/Changelog Entry: http://drupal.org/node/72177
Secunia Advisory ID:20920
FrSIRT Advisory: ADV-2006-2670