Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0926
Reference (s):
- CERT-VN:VU#637068
- URL: http://www.kb.cert.org/vuls/id/637068