In the 2000s I had found some minor symlink race conditions and wrote short advisories about each one. For posterity I am posting them again here. Also to raise the question, is mktemp used so commonly now that tmp symlink type vulnerabilities are no longer an issue?
Keep in mind this was from a while ago, I am hoping that my penmanship and technical skill level have risen since then.
Enjoy!
Prismstumbler 0.7.3 File Overwrite
Flying rev. 6.20 Read any file
Linberto v1.0.2 (Q-Bert clone) File Overwrite
~M
Matt Landers 