lib-src/movemail.c in movemail in emacs 22 and 23 allows local users to read, modify, or delete arbitrary mailbox files via a symlink attack, related to improper file-permission checks.
- https://bugs.launchpad.net/ubuntu/+bug/531569
No PoCs found on GitHub currently.