silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file.
http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt
http://www.securityfocus.com/bid/14716
http://www.securityfocus.com/archive/1/409672