Launchpad.net

CVE 2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

See the CVE page on Mitre.org for more details.