Security Advisory
CVE-2008-4406
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.