(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.Referenceshttp://www.securityfocus.com/bid/429