atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges.
CVSS Metrics
