Ubuntu Security Notice USN-198-1 – Javier Fernandez-Sanguino Pena discovered that several tools in the cfengine package (vicf, cfmailfilter, and cfcron) create and use temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user running the cfengine program.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40567/USN-198-1.txt
Source: https://packetstormsecurity.com/files/40567/Ubuntu-Security-Notice-198-1.html