+++ This bug was initially created as a clone of Bug #159000 +++ Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file. http://www.zataz.net/adviso/shtool-05252005.txt openldap contains shtool in its source.
This issue should also affect FC4
Fixed for FC3 in FEDORA-2005-517. http://www.redhat.com/archives/fedora-announce-list/2005-July/msg00010.html