eject 2.0.10 when installed setuid on systems such as SuSE Linux 7.3 generates different error messages depending on whether a specified file exists or not which allows local users to obtain sensitive information.