Fabric before 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on (1) a /tmp/fab.*.tar file or (2) certain other files in the top level of /tmp/.
CVSS 2.0MEDIUM 4.4·Local·No auth·Interaction —·EPSS 0.0033·Published 2011-07-27·Fixed in 1.1.0CWE-59
