xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
http://www.ubuntu.com/usn/usn-516-1
http://www.securityfocus.com/bid/23922
http://www.novell.com/linux/security/advisories/2007_10_sr.html
http://www.mandriva.com/security/advisories?name=MDKSA-2007:134
http://secunia.com/advisories/26867
http://secunia.com/advisories/25761
http://secunia.com/advisories/25425