SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-1770
http://www.securityfocus.com/bid/5895