A vulnerability in the Xandros Linux autorun utility can be used to disclose parts of protected files such as /etc/shadow.