Launchpad.net

CVE 2010-4817

pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.

See the CVE page on Mitre.org for more details.