Debian Security Advisory DSA 418-1 – A bug was discovered in vbox3, a voice response system for isdn4linux, whereby root privileges were not properly relinquished before executing a user-supplied tcl script.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32489/DSA-418-1
Source: https://packetstormsecurity.com/files/32489/DSA-418-1.html