KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16963
http://www.kde.org/info/security/advisory-20040811-1.txt
http://www.debian.org/security/2004/dsa-539