Launchpad.net

CVE 2008-4477

alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.

See the CVE page on Mitre.org for more details.