linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack.
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1309
http://www.redhat.com/support/errata/rh51-errata-general.html#linuxconf