Ubuntu Security Notice USN-100-1 – Javier Fernandez-Sanguino Pena noticed that cdrecord created temporary files in an insecure manner if DEBUG was enabled in /etc/cdrecord/rscsi. If the default value was used (which stored the debug output file in /tmp), this could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking cdrecord.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/36779/USN-100-1.txt
Source: https://packetstormsecurity.com/files/36779/Ubuntu-Security-Notice-100-1.html