cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6941
http://www.securityfocus.com/bid/3148
http://www.novell.com/linux/security/advisories/2001_025_xmcd_txt.html