vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.
https://exchange.xforce.ibmcloud.com/vulnerabilities/54916
http://www.securityfocus.com/archive/1/508507/100/0/threaded