muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5345
http://www.gentoo.org/security/en/glsa/glsa-200903-35.xml