Launchpad.net

CVE 2007-4129

CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory.

See the CVE page on Mitre.org for more details.