CVE-2008-1877

tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges.