Get Demo
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.