ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16052
http://www.securityfocus.com/bid/10269
http://www.debian.org/security/2005/dsa-907
http://secunia.com/advisories/17682