Ubuntu Security Notice 2003-1 – Stuart McLaren discovered that Glance did not properly enforce the ‘download_image’ policy for cached images. An authenticated user could exploit this to obtain sensitive information in an image protected by this setting…. Ubuntu Security Notice 2003-1 – Stuart McLaren discovered that Glance did not properly enforce the ‘download_image’ policy for cached images. An authenticated user could exploit this to obtain sensitive information in an image protected by this setting.

Read more http://packetstormsecurity.com/files/123738/USN-2003-1.txt