Debian Security Advisory DSA 509-1 – Steve Kemp discovered a vulnerability in xatitv, one of the programs in the gatos package. If an administrator removes the default configuration file, a local attacker can escalate to root privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33453/dsa-509.txt
Source: https://packetstormsecurity.com/files/33453/dsa-509.txt.html