fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.