Launchpad.net

CVE 2008-3930

migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

See the CVE page on Mitre.org for more details.