CVE-2008-1877

Name of the Vulnerable Software and Affected Versions tss version 0.8.1

Description The issue allows local users to read arbitrary files. This is achieved via the -a parameter, which is processed while tss is running with privileges.

Recommendations For version 0.8.1, avoid using the -a parameter until a fix is available. As a temporary workaround, consider restricting the privileges under which tss runs to minimize the risk of exploitation.