X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file.
https://exchange.xforce.ibmcloud.com/vulnerabilities/13612
http://www.xcdroast.org/xcdr098/changelog-a15.html
http://www.securityfocus.com/bid/8983