Launchpad.net

CVE 2005-1119

Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files.

See the CVE page on Mitre.org for more details.