squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
NVD-CWE-Other