GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.
Related posts