Tripwire commercial versions equal to and below 2.4 and Tripwire open source versions equal to and below 2.3.1 are susceptible to a format string vulnerability an email report is generated. This vulnerability allows an attacker to execute arbitrary code with the rights of the user running the file check, which is typically root.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33470/trippedUp.txt
Source: https://packetstormsecurity.com/files/33470/trippedUp.txt.html