A vulnerability exists in Oracle Automated Service Manager 1.3.1 which allows a local user to gain root privileges during the installation process. The vulnerability is due to the insecure handling of temporary files in the /tmp directory. An attacker can exploit this vulnerability by creating a malicious crontab file and placing it in the /tmp directory. The malicious crontab file will be executed when the installation process is completed, granting the attacker root privileges.