gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
https://exchange.xforce.ibmcloud.com/vulnerabilities/5917
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-0116
http://www.securityfocus.com/bid/2188
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-006.php3