An information leak issue was discovered in the calcsize SUID binary, allowing an attacker to determine if a directory exists anywhere in the file system. The binary uses the `opendir()` function as root without path validation, enabling an attacker to provide an arbitrary path.